last executing test programs: 54.649400485s ago: executing program 1 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 54.557114646s ago: executing program 1 (id=107): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000d9418a030000000000000000000001000007020000f8ffffffb703000008000010b70400000000000085000000010000009586c337729a757ba09d9dd76a57c307c6234821be721c65b43ceefb819057aa0a569903c0988fe0e4cd97ee8db1bd40604b52d94ca19f5c5ebcdb49b7b5d8251a6531de38aea32756e0d0a82be2cf6d375a0ff38fd602b3ceaf2ead4fbc625e1794766d57ab8ea16eaba5781a9cdcf8e9f7fc3b3fdc718705f6fa2d1c13fd822634a640b9f33b6470a07e28ff99829615b45bd10e7108bf270d1e6f349a93a952fb2b6ffb447a3610e9a1492e93b4096491700cc1173144"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(r2, 0x407, 0x100000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000900)="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", 0x45c) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6(0xa, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000014a65c63dc6dd69c2cae97b164d0c8990528cbe2d94e715266edf2c2020123", @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) 54.459135967s ago: executing program 1 (id=112): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x12, 0x40, 0x2}, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) 54.216484191s ago: executing program 1 (id=114): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x80, &(0x7f0000001300)=ANY=[], 0x1, 0x65e, &(0x7f00000007c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchown(r5, 0x0, r7) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x1}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x4, 0xee25, 0xa3d9, 0xe, 0x7, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0xb, 0x5, 0x200}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r10, &(0x7f00000001c0)=""/234, 0xea, 0x40012122, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffee, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_ACT={0x3c, 0x4, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r11) ptrace$peeksig(0x4209, r11, &(0x7f00000000c0)={0x1, 0x1, 0xffffffffffffff8c}, &(0x7f00000002c0)) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 53.334921655s ago: executing program 1 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x48, r1, 0xa05, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004801}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000955f328f0c79e396ee5ac8074d5a9237ff1f1b0000000000000000000000000000ed513e700041b4586a8e6cd3b545a1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='kfree\x00', r4}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x8}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x3800}]}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x10800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 52.694270945s ago: executing program 1 (id=142): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000026c0), 0x7, 0x10000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x2015, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x6, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x82170, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0000000500000002000064a91ea10000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="006100000000000005000000000000008900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000004000000010000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000050000000000000000000000000000076a2d5560fd5878f375ed30c0e2582e62661aa56a4fffc9de24b3470dc7411fec53364f1eaf8dd6919242089c3ca08240fea9c428641e4421070a061766994bf4154c3a20f1843b23848dd0e8df6898e693780e71611033b1dac4a980839a2ca575efac9431a3f4242964507e06495555b49b6a3ecc673ce82c24fa"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000007c89000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.693949415s ago: executing program 32 (id=142): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000026c0), 0x7, 0x10000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x2015, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x6, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x82170, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0000000500000002000064a91ea10000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="006100000000000005000000000000008900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000004000000010000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000050000000000000000000000000000076a2d5560fd5878f375ed30c0e2582e62661aa56a4fffc9de24b3470dc7411fec53364f1eaf8dd6919242089c3ca08240fea9c428641e4421070a061766994bf4154c3a20f1843b23848dd0e8df6898e693780e71611033b1dac4a980839a2ca575efac9431a3f4242964507e06495555b49b6a3ecc673ce82c24fa"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000007c89000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.96207406s ago: executing program 0 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) fallocate(r5, 0x0, 0x0, 0x1001f0) 1.771144753s ago: executing program 2 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4048080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x0, @val=@perf_event={0x3c}}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.658422634s ago: executing program 2 (id=931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x1004) 1.654896535s ago: executing program 2 (id=932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 1.623158036s ago: executing program 2 (id=934): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x102b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0x7fff0004}, {0x2, 0x8, 0x7, 0x76}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff4e, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088913b30b8c600000000000000000000000000000000000000000800"/118], 0xb8}}, 0x20008044) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x20000000, 0xffff}}]}, 0xc4}}, 0x8042) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r6, 0x0, 0x39000, 0x0) splice(r5, 0x0, r1, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000cc0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1b}, 0x94) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x81) creat(&(0x7f0000000380)='./file0\x00', 0x0) r10 = socket(0x29, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000000), &(0x7f0000000140)=0x14) 808.409408ms ago: executing program 0 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 796.279738ms ago: executing program 3 (id=945): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 762.740458ms ago: executing program 0 (id=947): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) syz_open_dev$usbmon(&(0x7f0000000900), 0x6, 0x4400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 748.277338ms ago: executing program 3 (id=948): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 704.703249ms ago: executing program 2 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x81, 0x633, &(0x7f0000000600)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000c40)={{r2}, "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"}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 679.84875ms ago: executing program 3 (id=952): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0xba, 0x7ffc0002}]}) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x8000, 0x1, 0x40000333}, &(0x7f0000000000), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x45) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x300000c, &(0x7f0000000000), 0x1, 0x533, &(0x7f0000000e40)="$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") 622.49004ms ago: executing program 0 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x1004) 604.934921ms ago: executing program 0 (id=954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x1e67, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x100}, {0x0, 0x8}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xae7, 0x9, 0x2, 0xa46}, {}, {0x4}, {0x6}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x200, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0xf, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x5a9}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x80}, {}, {0x0, 0xfe}, {0x7a, 0x0, 0x0, 0xfffffffe}, {}, {0x400, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff}, {0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x10000000}, {0x0, 0xffffffff, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x3, 0xfffff800}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x9}, {0x9}, {}, {0x3}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0xfffffffe}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {0x1}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {}, {0x0, 0x8}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x5, 0x0, 0x4000000, 0x800}], [{}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0xe}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xeb4}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) setxattr$security_selinux(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x1) 601.484041ms ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) fallocate(r5, 0x0, 0x0, 0x1001f0) 554.298512ms ago: executing program 5 (id=956): socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) 386.327504ms ago: executing program 5 (id=957): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 386.011044ms ago: executing program 4 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @private2, [@fragment={0x2f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) 385.223294ms ago: executing program 5 (id=959): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 359.650545ms ago: executing program 0 (id=960): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000069000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000001811000000", @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3) 358.375645ms ago: executing program 3 (id=961): prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r1, r1, 0x0) 341.007665ms ago: executing program 5 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x0) 337.962295ms ago: executing program 4 (id=963): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@newtaction={0x1ea8, 0x30, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{0x4}, {0x2dc, 0x1, [@m_xt={0x1c4, 0x1c, 0x0, 0x0, {{0x7}, {0x164, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x1, 0x5, "2ae8b110fd6c1c37c3346f98f363232ee5ad1badd44feca870dcbdd4de8dedb5f0ca2eae4c5f23be775a12f9f459c174f862a55f438bf8cbb07951447f56c22dff18c7e8750b1dbc20062abf893524d8a4e34ba083a30ef13033242de5f5810137dc85b3e1522ced6ae02b9265ad720a2f39d44e127106eb866b55e58ac7b7f054e9b948c009df60ec372e"}}, @TCA_IPT_TARG={0x98, 0x6, {0x7, 'security\x00', 0x0, 0x2, "80e1df43a8a185e0bc31659d25cb32278e67133012be530b6f03ad3ba9cac8dfed257000289f50b71fc907568e458cf0f3de1ca7a25fd5c75d029b742cd837fd890c6814bf8071b11a4318d50f2873a3d774a6655f10146ad450d878a1d9e65acbe4132e9c9195804841393b5305"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x3b, 0x6, "97af97bc1422f9f936088bd5d856652741fc6b7697b3b657ea4d802ddc6f52f10f7baefb67b9fb04b73a117a2313faa61215bfbe56ff50"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x114, 0x9, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x139f2082, 0x2, 0x2}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x1, 0x0, 0xd3}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4f, 0x7, 0x5, 0xff}, 0x5}}]}, {0x91, 0x6, "725933ff97901b2b2056362a82a8489e257c81ff5cd1e4e61c4cae6ea1212d801818c9860ad2efe5198c311b993e0217c1eaae6e760d97511295e2b6a362f14725c16c8e937b48da24830e98e613392eaf245a28cb3468a3e1cf926cb2d3d4909e2fb6787ccb6fcec0adb28817e927c30fa0eaa708104e4c2135329e21945c22e3509c4136ca6e4bb5597853d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x118c, 0x1, [@m_csum={0xb0, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20000000, 0x3, 0x4}, 0x7e}}]}, {0x66, 0x6, "04463f8ce5630d543977a73916fbe752bbd44f4eda6f2c8c90b2111a24f0561ff9ea186bea0d6d3e89c9afa922a704e39488aadecaf20ba0065611d5e35eae153157e37c9aefd1322a804e13ecfaf4689ce3a80e86dd0524cac087dc48d27731a70a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x60, 0x19, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x5, 0x6, "ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x1078, 0x7, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'wg0\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffb53, 0x8001, 0x7, 0x8000, 0xfff}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x1e8, 0x1, [@m_simple={0xd8, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1c3, 0xae9, 0x4, 0x9, 0x401}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x1, 0x9, 0xc}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x73, 0x6, "9ad543e4f889d6ef8b40c04a1059f28eb8f5bfe6e1ed53877802b39a4df967b2ca6a7a1ecf7b9bdd85cdde19e9bf1d885053b0c6431d473d8eeab8d2a879e4757edac8252f5b5113ce1a28db29e7aaebfaf98e099eee3c01f63ffb15204a5d8fa4d2199828875ad7c6168191195e2c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xdc, 0x1e, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x1, 0x30000000, 0xa965534b, 0x5}, 0xfffd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x3, 0xf, 0x9}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x8, 0x9e85, 0xffffffff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x3, 0x9bdb}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xdd5e, 0x10000000, 0x0, 0x28}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xd0b4, 0x5, 0xff, 0x10000}, 0xaca1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x83c, 0x1, [@m_police={0x838, 0x6, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7b375aeb, 0x7, 0x80, 0x4, 0x7, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x2, 0x8, 0x5, 0x53a, 0x6, 0x3308, 0x3, 0x0, 0x729e0483, 0x5, 0x9, 0x4, 0x7fff, 0x48, 0x4, 0x6, 0x5, 0x7, 0x1, 0x4, 0xd, 0x3b681565, 0x9, 0x5, 0x40, 0x8, 0x3, 0x3, 0x8, 0x4, 0x7, 0x0, 0x6, 0x1000, 0x9, 0x6d, 0xe9c, 0x6, 0xfffff36a, 0x38, 0x7, 0x94, 0x0, 0x4, 0x1, 0xef2, 0x7, 0x8, 0x3ddf, 0x8, 0x10, 0x8, 0x6, 0x8, 0x13a, 0x8, 0xfffff34a, 0x2, 0x5, 0x1, 0x1, 0x7f, 0x6, 0x7, 0x100, 0xfffffffe, 0x8, 0x9, 0x7, 0x81, 0x3ff, 0xfd, 0x7f, 0x7, 0x2, 0x40, 0x9, 0x1, 0x90000, 0x9, 0xf, 0x9, 0x6, 0xc886, 0x6, 0x0, 0x5, 0x7ff, 0x40, 0x2, 0x3, 0x7ff, 0x1, 0xf76d, 0x3, 0x80000000, 0x2, 0x100, 0x6, 0xfffffffc, 0xc, 0x8001, 0x8, 0x7, 0x3, 0x7, 0x0, 0x3, 0xffffffff, 0xfffffffb, 0x8, 0x2, 0x0, 0x3, 0x2, 0x6, 0x3d, 0x2, 0x6, 0xc, 0x100, 0x1, 0x5, 0x5, 0xe, 0x6, 0x80000001, 0x1caa, 0x10, 0x9, 0xfe, 0x3, 0x4, 0x3, 0x6, 0xfffffffe, 0x0, 0xaa, 0xfffffffe, 0x6, 0x5, 0x2, 0x766, 0x4, 0xfffffffa, 0x0, 0x80000000, 0x9, 0x5, 0x3, 0xa, 0xfffff001, 0x0, 0x7fffffff, 0x8, 0xb, 0x3, 0x4, 0x5, 0x1000, 0xfffffffd, 0xef91, 0xf, 0x853d, 0x1, 0x3, 0x100, 0x2, 0xf16, 0x101, 0x7, 0x9, 0x0, 0x2, 0x6, 0xcb3f, 0x7, 0x5, 0xfffffff8, 0x7, 0x101, 0x10000, 0x2, 0x40, 0x5, 0x200, 0x2, 0xffff, 0x14, 0x1, 0x1, 0x40, 0xfff, 0x4, 0x2, 0x81, 0xb, 0xbe4, 0x8000, 0x3, 0x80, 0x5, 0x400, 0x7, 0x9, 0x8, 0x0, 0x9, 0xaa, 0x6, 0x3, 0x2, 0x7, 0x4, 0xfe0000, 0xd, 0x2, 0x4, 0x3fcd, 0x7ca5, 0x0, 0x6, 0x1ff, 0x800, 0xc180, 0x3, 0x9, 0x7, 0x100, 0xd3, 0x1, 0x3, 0xff4, 0x7, 0xf9, 0x6, 0x9, 0x101, 0x9, 0x4, 0x9a0, 0x6, 0xffffffff, 0x9, 0x4000000]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x7, 0xffffffd7, 0x0, 0x2, 0xfffffff6, 0x100, 0xee99, 0x3, 0xa5, 0xfffffff5, 0x1, 0x9, 0x3, 0x1, 0x35a, 0xffffffff, 0xa, 0x0, 0x7, 0x6, 0x2, 0x6, 0x0, 0x3, 0xfffffffc, 0x0, 0x7, 0x8000, 0xc, 0xf5e, 0xcab7, 0x1, 0x80000000, 0x9, 0x9, 0x3, 0x100, 0x42c, 0x5, 0x0, 0x3, 0x3, 0x956, 0x4, 0x8, 0xb, 0x2a, 0x48c4, 0x8, 0x457ca3ed, 0xe4c2, 0xc, 0x6, 0x8, 0x9, 0x5, 0x7, 0x9, 0x7fff, 0x0, 0xffff, 0xffb5, 0xcef, 0x1000, 0x3ff, 0xff, 0xffff, 0x200, 0x1, 0xfffffffe, 0xcf, 0x80000000, 0x6, 0x5, 0x6, 0x8, 0x5, 0x4, 0x5, 0x4, 0xba, 0xc, 0xfffffff3, 0x0, 0x2, 0x3, 0xb09, 0xe13b, 0x0, 0x401, 0x1, 0x8, 0x4, 0x10001, 0x9, 0x4, 0xfffffffc, 0x8, 0x98, 0x4, 0x4, 0xbc, 0x5b, 0x3283, 0x6, 0x401, 0x7, 0x40c, 0x5, 0x2, 0xd, 0x10001, 0x8000, 0xe632, 0x2, 0x400, 0x3, 0xf64, 0xffff, 0xb7, 0x3, 0xcb, 0x4, 0x6, 0x2, 0x6, 0x200, 0xf, 0x4, 0x5, 0xdf7, 0x0, 0x400, 0x28, 0x3, 0xffffffff, 0x0, 0x3, 0x3, 0x5, 0x0, 0x400, 0xfffffff9, 0xffffffff, 0x80, 0x2800000, 0x16e, 0x5947a6e5, 0x1f20000, 0x8, 0x2, 0xffff, 0x7, 0x7, 0x40000000, 0xfffffff7, 0x1, 0x3, 0xc207, 0x40, 0x4, 0xb2, 0x6, 0x10000, 0xb, 0x4, 0x7ff, 0x4, 0x2, 0x9, 0x80, 0x1, 0x4, 0x2, 0x80000001, 0x9, 0x8d, 0x3, 0x1, 0x7f, 0x3, 0x2, 0xf0, 0x7, 0x80000001, 0x1ff, 0xfe9, 0x6bd, 0x8, 0x7, 0x1, 0x800, 0x3ff, 0x9, 0x80, 0x0, 0xe7, 0x7ff, 0x80000001, 0x20000, 0x9727, 0x6, 0x2, 0x9, 0x6660, 0x5, 0x8, 0x9, 0x4, 0x5, 0xf2, 0x9ad, 0x7, 0x9, 0x0, 0xe, 0x4, 0x2, 0x5, 0x0, 0x10001, 0xfff, 0xffff, 0x7fffffff, 0x3, 0xc5, 0x2, 0x2, 0x80000000, 0x8, 0x3, 0x8, 0x0, 0x2, 0x9, 0x2, 0x1, 0x1, 0x9, 0x5, 0x3ff, 0x7fffffff, 0x9b4e, 0x401, 0x9, 0x8, 0x3, 0x1fc6, 0x6, 0x8, 0x7f, 0x9, 0x3, 0x6, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}]}, 0x1ea8}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 312.671145ms ago: executing program 4 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) 312.374245ms ago: executing program 5 (id=965): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) 295.670496ms ago: executing program 3 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4048080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x0, @val=@perf_event={0x3c}}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r6 = fcntl$dupfd(r5, 0x0, r5) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 199.008417ms ago: executing program 4 (id=967): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 197.412927ms ago: executing program 5 (id=968): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000020f9b60b000000000000000000185100003bebeba1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x46c2212c5a72b689) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0), 0x8) listen(r2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x96) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x18) sync() sync() socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x20, 0x3, 0x5, 0x40, @private1, @empty, 0x40, 0x40, 0x0, 0x7}}) socket$rds(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendfile(r6, r5, 0x0, 0x7ffff000) 170.318927ms ago: executing program 3 (id=969): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1, &(0x7f0000000140)=@raw=[@generic={0x9, 0x6, 0xa, 0x4, 0xec}], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x41000, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x2, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, 0x1, r0], &(0x7f0000000580)=[{0x4, 0x5, 0x9, 0x4}, {0x1, 0x4, 0x2, 0xa}, {0x4, 0x4, 0x10, 0x8}, {0x3, 0x2, 0x4, 0x2}, {0x1, 0x3, 0x5}], 0x10, 0x9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x9, 0x3, 0x100, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x103f81af530ab711, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r4 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000600), 0x10) 94.401709ms ago: executing program 4 (id=970): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=971): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000200000000000000000000000000000903000000000000000000000a"], 0x0, 0x4a, 0x0, 0x8}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) kernel console output (not intermixed with test programs): .064882][ T5312] FAT-fs (loop3): Directory bread(block 68) failed [ 60.064899][ T5312] FAT-fs (loop3): Directory bread(block 69) failed [ 60.064922][ T5312] FAT-fs (loop3): Directory bread(block 70) failed [ 60.064937][ T5312] FAT-fs (loop3): Directory bread(block 71) failed [ 60.064960][ T5312] FAT-fs (loop3): Directory bread(block 72) failed [ 60.064988][ T5312] FAT-fs (loop3): Directory bread(block 73) failed [ 60.123036][ T5315] loop3: detected capacity change from 0 to 128 [ 60.229144][ T5319] serio: Serial port ptm0 [ 60.292317][ T5331] random: crng reseeded on system resumption [ 60.338310][ T5337] FAULT_INJECTION: forcing a failure. [ 60.338310][ T5337] name failslab, interval 1, probability 0, space 0, times 0 [ 60.351024][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.4.480 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 60.351108][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.351118][ T5337] Call Trace: [ 60.351125][ T5337] [ 60.351132][ T5337] __dump_stack+0x1d/0x30 [ 60.351151][ T5337] dump_stack_lvl+0xe8/0x140 [ 60.351212][ T5337] dump_stack+0x15/0x1b [ 60.351229][ T5337] should_fail_ex+0x265/0x280 [ 60.351260][ T5337] should_failslab+0x8c/0xb0 [ 60.351283][ T5337] kmem_cache_alloc_noprof+0x50/0x310 [ 60.351399][ T5337] ? getname_kernel+0x3c/0x1f0 [ 60.351419][ T5337] getname_kernel+0x3c/0x1f0 [ 60.351440][ T5337] kern_path+0x23/0x130 [ 60.351465][ T5337] create_local_trace_uprobe+0x53/0x2c0 [ 60.351494][ T5337] perf_uprobe_init+0xc0/0x150 [ 60.351557][ T5337] perf_uprobe_event_init+0xea/0x150 [ 60.351577][ T5337] perf_try_init_event+0xd9/0x540 [ 60.351600][ T5337] ? perf_event_alloc+0xb1c/0x1680 [ 60.351672][ T5337] perf_event_alloc+0xb27/0x1680 [ 60.351698][ T5337] __se_sys_perf_event_open+0x4a5/0x11c0 [ 60.351726][ T5337] ? __rcu_read_unlock+0x4f/0x70 [ 60.351755][ T5337] __x64_sys_perf_event_open+0x67/0x80 [ 60.351841][ T5337] x64_sys_call+0x27ec/0x2fb0 [ 60.351860][ T5337] do_syscall_64+0xd2/0x200 [ 60.351879][ T5337] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.352004][ T5337] ? clear_bhb_loop+0x40/0x90 [ 60.352026][ T5337] ? clear_bhb_loop+0x40/0x90 [ 60.352047][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.352107][ T5337] RIP: 0033:0x7f055834e929 [ 60.352121][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.352175][ T5337] RSP: 002b:00007f05569b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 60.352195][ T5337] RAX: ffffffffffffffda RBX: 00007f0558575fa0 RCX: 00007f055834e929 [ 60.352208][ T5337] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0 [ 60.352221][ T5337] RBP: 00007f05569b7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.352235][ T5337] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 60.352245][ T5337] R13: 0000000000000000 R14: 00007f0558575fa0 R15: 00007ffeffc17fc8 [ 60.352261][ T5337] [ 60.664891][ T5344] FAULT_INJECTION: forcing a failure. [ 60.664891][ T5344] name failslab, interval 1, probability 0, space 0, times 0 [ 60.677799][ T5344] CPU: 1 UID: 0 PID: 5344 Comm: syz.5.483 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 60.677826][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.677838][ T5344] Call Trace: [ 60.677844][ T5344] [ 60.677895][ T5344] __dump_stack+0x1d/0x30 [ 60.677912][ T5344] dump_stack_lvl+0xe8/0x140 [ 60.677964][ T5344] dump_stack+0x15/0x1b [ 60.677979][ T5344] should_fail_ex+0x265/0x280 [ 60.678003][ T5344] ? do_proc_control+0x1d6/0x8b0 [ 60.678025][ T5344] should_failslab+0x8c/0xb0 [ 60.678045][ T5344] __kmalloc_cache_noprof+0x4c/0x320 [ 60.678128][ T5344] do_proc_control+0x1d6/0x8b0 [ 60.678149][ T5344] ? should_fail_ex+0xdb/0x280 [ 60.678254][ T5344] proc_control_compat+0xae/0xe0 [ 60.678288][ T5344] usbdev_ioctl+0xee1/0x1710 [ 60.678392][ T5344] ? __pfx_usbdev_ioctl+0x10/0x10 [ 60.678419][ T5344] __se_sys_ioctl+0xce/0x140 [ 60.678443][ T5344] __x64_sys_ioctl+0x43/0x50 [ 60.678483][ T5344] x64_sys_call+0x19a8/0x2fb0 [ 60.678502][ T5344] do_syscall_64+0xd2/0x200 [ 60.678520][ T5344] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.678546][ T5344] ? clear_bhb_loop+0x40/0x90 [ 60.678587][ T5344] ? clear_bhb_loop+0x40/0x90 [ 60.678609][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.678706][ T5344] RIP: 0033:0x7fc99b30e929 [ 60.678721][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.678739][ T5344] RSP: 002b:00007fc999977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.678758][ T5344] RAX: ffffffffffffffda RBX: 00007fc99b535fa0 RCX: 00007fc99b30e929 [ 60.678771][ T5344] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000005 [ 60.678782][ T5344] RBP: 00007fc999977090 R08: 0000000000000000 R09: 0000000000000000 [ 60.678795][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.678841][ T5344] R13: 0000000000000000 R14: 00007fc99b535fa0 R15: 00007ffc1016ad38 [ 60.678860][ T5344] [ 60.936706][ T5350] loop4: detected capacity change from 0 to 1024 [ 60.945557][ T5350] EXT4-fs: Invalid want_extra_isize 0 [ 61.066378][ T5366] serio: Serial port ptm0 [ 61.104525][ T5372] FAULT_INJECTION: forcing a failure. [ 61.104525][ T5372] name failslab, interval 1, probability 0, space 0, times 0 [ 61.117214][ T5372] CPU: 1 UID: 0 PID: 5372 Comm: syz.0.491 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 61.117239][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.117249][ T5372] Call Trace: [ 61.117255][ T5372] [ 61.117262][ T5372] __dump_stack+0x1d/0x30 [ 61.117280][ T5372] dump_stack_lvl+0xe8/0x140 [ 61.117379][ T5372] dump_stack+0x15/0x1b [ 61.117394][ T5372] should_fail_ex+0x265/0x280 [ 61.117420][ T5372] should_failslab+0x8c/0xb0 [ 61.117443][ T5372] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 61.117506][ T5372] ? __d_alloc+0x3d/0x350 [ 61.117529][ T5372] __d_alloc+0x3d/0x350 [ 61.117550][ T5372] ? __pfx_proc_self_get_link+0x10/0x10 [ 61.117583][ T5372] d_alloc_parallel+0x53/0xc40 [ 61.117706][ T5372] ? __rcu_read_unlock+0x34/0x70 [ 61.117729][ T5372] ? lockref_get_not_dead+0x120/0x1c0 [ 61.117829][ T5372] ? __rcu_read_unlock+0x4f/0x70 [ 61.117848][ T5372] __lookup_slow+0x8c/0x250 [ 61.117870][ T5372] lookup_slow+0x3c/0x60 [ 61.117891][ T5372] link_path_walk+0x753/0x900 [ 61.117929][ T5372] path_openat+0x1de/0x2170 [ 61.117995][ T5372] ? _parse_integer_limit+0x170/0x190 [ 61.118071][ T5372] do_filp_open+0x109/0x230 [ 61.118098][ T5372] ? __pfx_kfree_link+0x10/0x10 [ 61.118170][ T5372] do_sys_openat2+0xa6/0x110 [ 61.118203][ T5372] __x64_sys_openat+0xf2/0x120 [ 61.118229][ T5372] x64_sys_call+0x1af/0x2fb0 [ 61.118247][ T5372] do_syscall_64+0xd2/0x200 [ 61.118266][ T5372] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.118372][ T5372] ? clear_bhb_loop+0x40/0x90 [ 61.118453][ T5372] ? clear_bhb_loop+0x40/0x90 [ 61.118502][ T5372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.118523][ T5372] RIP: 0033:0x7f96a56be929 [ 61.118536][ T5372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.118551][ T5372] RSP: 002b:00007f96a3d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.118567][ T5372] RAX: ffffffffffffffda RBX: 00007f96a58e5fa0 RCX: 00007f96a56be929 [ 61.118578][ T5372] RDX: 0000000000125c40 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 61.118607][ T5372] RBP: 00007f96a3d27090 R08: 0000000000000000 R09: 0000000000000000 [ 61.118618][ T5372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.118629][ T5372] R13: 0000000000000000 R14: 00007f96a58e5fa0 R15: 00007ffe1860aa68 [ 61.118716][ T5372] [ 61.358162][ T5374] random: crng reseeded on system resumption [ 61.391211][ T5375] loop3: detected capacity change from 0 to 512 [ 61.404656][ T5377] tipc: Enabled bearer , priority 0 [ 61.424535][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.445713][ T5375] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.460894][ T5390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 61.491843][ T5387] netlink: 144 bytes leftover after parsing attributes in process `syz.5.494'. [ 61.508102][ T5391] tipc: Enabling of bearer rejected, already enabled [ 61.565044][ T5394] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 61.592617][ T5394] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 61.609338][ T5376] tipc: Disabling bearer [ 62.622645][ T5509] tipc: Enabled bearer , priority 0 [ 62.652265][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.687116][ T5512] tipc: Enabling of bearer rejected, already enabled [ 62.787146][ T5508] tipc: Disabling bearer [ 62.951744][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.970058][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.094466][ T5551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.101742][ T5551] IPv6: NLM_F_CREATE should be set when creating new route [ 63.133560][ T5551] lo: entered allmulticast mode [ 63.149548][ T5551] tunl0: entered allmulticast mode [ 63.157783][ T5551] gre0: entered allmulticast mode [ 63.170131][ T5551] gretap0: entered allmulticast mode [ 63.178273][ T5551] erspan0: entered allmulticast mode [ 63.195099][ T5551] ip_vti0: entered allmulticast mode [ 63.211747][ T5551] ip6_vti0: entered allmulticast mode [ 63.219146][ T5551] sit0: entered allmulticast mode [ 63.235356][ T5551] ip6tnl0: entered allmulticast mode [ 63.242657][ T5551] ip6gre0: entered allmulticast mode [ 63.250234][ T5551] syz_tun: entered allmulticast mode [ 63.257398][ T5551] ip6gretap0: entered allmulticast mode [ 63.264703][ T5551] vcan0: entered allmulticast mode [ 63.271478][ T5551] bond0: entered allmulticast mode [ 63.276649][ T5551] ÿ: entered allmulticast mode [ 63.281661][ T5551] bond_slave_1: entered allmulticast mode [ 63.290157][ T5551] team0: entered allmulticast mode [ 63.295370][ T5551] team_slave_0: entered allmulticast mode [ 63.301236][ T5551] team_slave_1: entered allmulticast mode [ 63.308771][ T5551] dummy0: entered allmulticast mode [ 63.315598][ T5551] nlmon0: entered allmulticast mode [ 63.322076][ T5551] caif0: entered allmulticast mode [ 63.327430][ T5551] vxcan0: entered allmulticast mode [ 63.333806][ T5551] vxcan1: entered allmulticast mode [ 63.341088][ T5551] veth0: entered allmulticast mode [ 63.347810][ T5551] veth1: entered allmulticast mode [ 63.354869][ T5551] wg1: entered allmulticast mode [ 63.362013][ T5551] wg2: entered allmulticast mode [ 63.368146][ T5551] veth0_to_bridge: entered allmulticast mode [ 63.375987][ T5551] bridge_slave_0: entered allmulticast mode [ 63.383214][ T5551] veth1_to_bridge: entered allmulticast mode [ 63.391082][ T5551] bridge_slave_1: entered allmulticast mode [ 63.398002][ T5551] veth0_to_bond: entered allmulticast mode [ 63.406623][ T5551] veth1_to_bond: entered allmulticast mode [ 63.414412][ T5551] veth0_to_team: entered allmulticast mode [ 63.423328][ T5551] veth1_to_team: entered allmulticast mode [ 63.433721][ T5551] veth0_to_batadv: entered allmulticast mode [ 63.441737][ T5551] batadv_slave_0: entered allmulticast mode [ 63.450016][ T5551] veth1_to_batadv: entered allmulticast mode [ 63.457564][ T5551] batadv_slave_1: entered allmulticast mode [ 63.465018][ T5551] xfrm0: entered allmulticast mode [ 63.471506][ T5551] veth0_to_hsr: entered allmulticast mode [ 63.478394][ T5551] hsr_slave_0: entered allmulticast mode [ 63.485575][ T5551] veth1_virt_wifi: entered allmulticast mode [ 63.513655][ T5551] veth0_virt_wifi: entered allmulticast mode [ 63.521258][ T5551] veth1_vlan: entered allmulticast mode [ 63.531782][ T5613] loop5: detected capacity change from 0 to 512 [ 63.561429][ T5551] vlan0: entered allmulticast mode [ 63.566812][ T5551] vlan1: entered allmulticast mode [ 63.593200][ T5613] EXT4-fs (loop5): 1 orphan inode deleted [ 63.604469][ T5551] macvlan0: entered allmulticast mode [ 63.610145][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 63.611630][ T5613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.649189][ T5551] macvlan1: entered allmulticast mode [ 63.660488][ T5613] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.672791][ T5551] ipvlan1: entered allmulticast mode [ 63.678369][ T5551] veth1_macvtap: entered allmulticast mode [ 63.685587][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.698475][ T5551] veth0_macvtap: entered allmulticast mode [ 63.721541][ T5551] macvtap0: entered allmulticast mode [ 63.737775][ T5551] macsec0: entered allmulticast mode [ 63.762992][ T5551] geneve0: entered allmulticast mode [ 63.773784][ T5551] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.782921][ T5551] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.791985][ T5551] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.801129][ T5551] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.811643][ T5551] geneve1: entered allmulticast mode [ 63.819446][ T5551] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 63.827601][ T5551] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 63.836202][ T5551] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 63.845227][ T5551] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 63.853571][ T5551] veth2: entered allmulticast mode [ 63.858920][ T5551] veth3: entered allmulticast mode [ 63.864242][ T5551] erspan1: entered allmulticast mode [ 63.889876][ T5643] tipc: Enabled bearer , priority 0 [ 64.013247][ T5657] tipc: Enabling of bearer rejected, already enabled [ 64.050619][ T5681] loop3: detected capacity change from 0 to 2048 [ 64.137226][ T5681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.152219][ T5642] tipc: Disabling bearer [ 64.211574][ T5697] loop4: detected capacity change from 0 to 512 [ 64.238332][ T5697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.280269][ T5697] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.309536][ T5700] Falling back ldisc for ttyS3. [ 64.324212][ T5697] EXT4-fs (loop4): 1 truncate cleaned up [ 64.336536][ T5697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.377069][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.410520][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 64.410536][ T29] audit: type=1326 audit(2000000025.520:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.479704][ T29] audit: type=1326 audit(2000000025.520:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.503261][ T29] audit: type=1326 audit(2000000025.520:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.526796][ T29] audit: type=1326 audit(2000000025.520:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.550352][ T29] audit: type=1326 audit(2000000025.520:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.566271][ T5737] loop4: detected capacity change from 0 to 512 [ 64.575812][ T29] audit: type=1326 audit(2000000025.520:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.605508][ T29] audit: type=1326 audit(2000000025.520:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.630146][ T29] audit: type=1326 audit(2000000025.520:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.653593][ T29] audit: type=1326 audit(2000000025.520:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.676077][ T5737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.677043][ T29] audit: type=1326 audit(2000000025.520:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055834e929 code=0x7ffc0000 [ 64.722538][ T5737] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.745132][ T5737] EXT4-fs (loop4): 1 truncate cleaned up [ 64.751260][ T5737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.838626][ T5753] loop4: detected capacity change from 0 to 512 [ 64.862208][ T5753] EXT4-fs (loop4): 1 orphan inode deleted [ 64.883850][ T3916] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 64.896513][ T5753] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.951629][ T5766] netlink: 14 bytes leftover after parsing attributes in process `syz.3.528'. [ 64.986989][ T5766] bond0 (unregistering): (slave c1ÿ): Releasing backup interface [ 65.000418][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.025445][ T5773] validate_nla: 4 callbacks suppressed [ 65.025459][ T5773] netlink: 'syz.4.531': attribute type 298 has an invalid length. [ 65.034717][ T5766] bond0 (unregistering): Released all slaves [ 65.055162][ T5778] loop4: detected capacity change from 0 to 128 [ 65.072745][ T5778] FAT-fs (loop4): Directory bread(block 162) failed [ 65.080137][ T5778] FAT-fs (loop4): Directory bread(block 163) failed [ 65.089776][ T5778] FAT-fs (loop4): Directory bread(block 164) failed [ 65.099908][ T5780] tipc: Enabled bearer , priority 0 [ 65.100074][ T5778] FAT-fs (loop4): Directory bread(block 165) failed [ 65.113969][ T5782] FAULT_INJECTION: forcing a failure. [ 65.113969][ T5782] name failslab, interval 1, probability 0, space 0, times 0 [ 65.114288][ T5778] FAT-fs (loop4): Directory bread(block 166) failed [ 65.126680][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz.5.535 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 65.126705][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.126718][ T5782] Call Trace: [ 65.126739][ T5782] [ 65.126748][ T5782] __dump_stack+0x1d/0x30 [ 65.126769][ T5782] dump_stack_lvl+0xe8/0x140 [ 65.126789][ T5782] dump_stack+0x15/0x1b [ 65.126806][ T5782] should_fail_ex+0x265/0x280 [ 65.126863][ T5782] should_failslab+0x8c/0xb0 [ 65.126885][ T5782] __kmalloc_noprof+0xa5/0x3e0 [ 65.126911][ T5782] ? security_prepare_creds+0x52/0x120 [ 65.126936][ T5782] security_prepare_creds+0x52/0x120 [ 65.127019][ T5782] prepare_creds+0x34a/0x4c0 [ 65.127042][ T5782] set_current_groups+0x1b/0x180 [ 65.127121][ T5782] __se_sys_setgroups+0x282/0x300 [ 65.127199][ T5782] __x64_sys_setgroups+0x31/0x40 [ 65.127218][ T5782] x64_sys_call+0x2495/0x2fb0 [ 65.127239][ T5782] do_syscall_64+0xd2/0x200 [ 65.127295][ T5782] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.127321][ T5782] ? clear_bhb_loop+0x40/0x90 [ 65.127341][ T5782] ? clear_bhb_loop+0x40/0x90 [ 65.127362][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.127403][ T5782] RIP: 0033:0x7fc99b30e929 [ 65.127419][ T5782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.127435][ T5782] RSP: 002b:00007fc999977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 65.127503][ T5782] RAX: ffffffffffffffda RBX: 00007fc99b535fa0 RCX: 00007fc99b30e929 [ 65.127516][ T5782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.127544][ T5782] RBP: 00007fc999977090 R08: 0000000000000000 R09: 0000000000000000 [ 65.127556][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.127569][ T5782] R13: 0000000000000000 R14: 00007fc99b535fa0 R15: 00007ffc1016ad38 [ 65.127601][ T5782] [ 65.210296][ T5783] tipc: Enabling of bearer rejected, already enabled [ 65.218592][ T5778] FAT-fs (loop4): Directory bread(block 167) failed [ 65.306843][ T5787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.536'. [ 65.317146][ T5778] FAT-fs (loop4): Directory bread(block 168) failed [ 65.322887][ T5787] netlink: 212 bytes leftover after parsing attributes in process `syz.5.536'. [ 65.325876][ T5778] FAT-fs (loop4): Directory bread(block 169) failed [ 65.390830][ T5779] tipc: Disabling bearer [ 65.402425][ T5778] FAT-fs (loop4): Directory bread(block 162) failed [ 65.409868][ T5778] FAT-fs (loop4): Directory bread(block 163) failed [ 65.416798][ T5778] syz.4.533: attempt to access beyond end of device [ 65.416798][ T5778] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 65.430517][ T5778] syz.4.533: attempt to access beyond end of device [ 65.430517][ T5778] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 65.468421][ T5792] loop3: detected capacity change from 0 to 512 [ 65.476137][ T5792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.487144][ T5792] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 65.502070][ T5792] EXT4-fs (loop3): 1 truncate cleaned up [ 65.508042][ T5792] EXT4-fs mount: 4 callbacks suppressed [ 65.508055][ T5792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.557214][ T5802] loop4: detected capacity change from 0 to 512 [ 65.567184][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.569833][ T5802] EXT4-fs: quotafile must be on filesystem root [ 65.585821][ T5798] netlink: 'syz.0.541': attribute type 4 has an invalid length. [ 65.585946][ T5802] capability: warning: `syz.4.540' uses deprecated v2 capabilities in a way that may be insecure [ 65.635589][ T5806] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.720516][ T5802] loop4: detected capacity change from 0 to 8192 [ 65.762870][ T3288] loop4: p1 < > p2 < p5 > p3 p4 [ 65.773691][ T3288] loop4: p3 start 83890176 is beyond EOD, truncated [ 65.780412][ T3288] loop4: p4 size 16776960 extends beyond EOD, truncated [ 65.802355][ T3288] loop4: p5 size 16776960 extends beyond EOD, truncated [ 65.810410][ T5826] FAULT_INJECTION: forcing a failure. [ 65.810410][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 65.823128][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz.2.552 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 65.823202][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.823215][ T5826] Call Trace: [ 65.823222][ T5826] [ 65.823230][ T5826] __dump_stack+0x1d/0x30 [ 65.823252][ T5826] dump_stack_lvl+0xe8/0x140 [ 65.823273][ T5826] dump_stack+0x15/0x1b [ 65.823290][ T5826] should_fail_ex+0x265/0x280 [ 65.823369][ T5826] should_failslab+0x8c/0xb0 [ 65.823403][ T5826] kmem_cache_alloc_noprof+0x50/0x310 [ 65.823495][ T5826] ? xfrm_state_alloc+0x2c/0x190 [ 65.823513][ T5826] xfrm_state_alloc+0x2c/0x190 [ 65.823550][ T5826] pfkey_add+0x3e5/0x12e0 [ 65.823588][ T5826] pfkey_sendmsg+0x715/0x900 [ 65.823629][ T5826] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 65.823659][ T5826] __sock_sendmsg+0x145/0x180 [ 65.823679][ T5826] ____sys_sendmsg+0x31e/0x4e0 [ 65.823774][ T5826] ___sys_sendmsg+0x17b/0x1d0 [ 65.823909][ T5826] __x64_sys_sendmsg+0xd4/0x160 [ 65.823932][ T5826] x64_sys_call+0x2999/0x2fb0 [ 65.823955][ T5826] do_syscall_64+0xd2/0x200 [ 65.823989][ T5826] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.824012][ T5826] ? clear_bhb_loop+0x40/0x90 [ 65.824032][ T5826] ? clear_bhb_loop+0x40/0x90 [ 65.824056][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.824073][ T5826] RIP: 0033:0x7fdaa859e929 [ 65.824086][ T5826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.824104][ T5826] RSP: 002b:00007fdaa6c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.824124][ T5826] RAX: ffffffffffffffda RBX: 00007fdaa87c5fa0 RCX: 00007fdaa859e929 [ 65.824137][ T5826] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 65.824150][ T5826] RBP: 00007fdaa6c07090 R08: 0000000000000000 R09: 0000000000000000 [ 65.824189][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.824199][ T5826] R13: 0000000000000000 R14: 00007fdaa87c5fa0 R15: 00007ffd326421b8 [ 65.824214][ T5826] [ 65.827412][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 65.867035][ T5802] loop4: p1 < > p2 < p5 > p3 p4 [ 65.886661][ T5829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 65.891624][ T5802] loop4: p3 start 83890176 is beyond EOD, truncated [ 66.063407][ T5802] loop4: p4 size 16776960 extends beyond EOD, truncated [ 66.080325][ T5802] loop4: p5 size 16776960 extends beyond EOD, truncated [ 66.111981][ T5835] Cannot find del_set index 4 as target [ 66.153692][ T5840] loop3: detected capacity change from 0 to 512 [ 66.169409][ T5840] journal_path: Lookup failure for './file0/../file0' [ 66.176230][ T5840] EXT4-fs: error: could not find journal device path [ 66.185953][ T5840] Cannot find del_set index 200 as target [ 66.199158][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 66.201427][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.210867][ T3732] udevd[3732]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 66.230548][ T3733] udevd[3733]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 66.264301][ T5844] loop4: detected capacity change from 0 to 2048 [ 66.278309][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.278487][ T3733] udevd[3733]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 66.289331][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 66.305021][ T3732] udevd[3732]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 66.320605][ T5850] loop3: detected capacity change from 0 to 128 [ 66.328007][ T5850] FAT-fs (loop3): Directory bread(block 162) failed [ 66.334909][ T5850] FAT-fs (loop3): Directory bread(block 163) failed [ 66.341705][ T5850] FAT-fs (loop3): Directory bread(block 164) failed [ 66.348302][ T5850] FAT-fs (loop3): Directory bread(block 165) failed [ 66.350228][ T5844] loop4: p1 < > p4 [ 66.355197][ T5850] FAT-fs (loop3): Directory bread(block 166) failed [ 66.360363][ T5844] loop4: p4 size 8388608 extends beyond EOD, truncated [ 66.365353][ T5850] FAT-fs (loop3): Directory bread(block 167) failed [ 66.379480][ T5850] FAT-fs (loop3): Directory bread(block 168) failed [ 66.386253][ T5850] FAT-fs (loop3): Directory bread(block 169) failed [ 66.399969][ T5850] FAT-fs (loop3): Directory bread(block 162) failed [ 66.406731][ T5850] FAT-fs (loop3): Directory bread(block 163) failed [ 66.413951][ T5850] syz.3.561: attempt to access beyond end of device [ 66.413951][ T5850] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 66.427752][ T5850] syz.3.561: attempt to access beyond end of device [ 66.427752][ T5850] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 66.460851][ T5852] loop4: detected capacity change from 0 to 128 [ 66.470074][ T5852] FAT-fs (loop4): Directory bread(block 162) failed [ 66.478680][ T5852] FAT-fs (loop4): Directory bread(block 163) failed [ 66.494277][ T5852] FAT-fs (loop4): Directory bread(block 164) failed [ 66.501663][ T5852] FAT-fs (loop4): Directory bread(block 165) failed [ 66.508323][ T5852] FAT-fs (loop4): Directory bread(block 166) failed [ 66.515085][ T5852] FAT-fs (loop4): Directory bread(block 167) failed [ 66.521750][ T5852] FAT-fs (loop4): Directory bread(block 168) failed [ 66.528447][ T5852] FAT-fs (loop4): Directory bread(block 169) failed [ 66.539689][ T5852] FAT-fs (loop4): Directory bread(block 162) failed [ 66.546806][ T5852] FAT-fs (loop4): Directory bread(block 163) failed [ 66.554223][ T5855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.563'. [ 66.554315][ T5852] syz.4.562: attempt to access beyond end of device [ 66.554315][ T5852] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 66.563121][ T5855] netlink: 212 bytes leftover after parsing attributes in process `syz.3.563'. [ 66.577329][ T5852] syz.4.562: attempt to access beyond end of device [ 66.577329][ T5852] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 66.674030][ T5865] mmap: syz.4.568 (5865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.764074][ T5875] loop4: detected capacity change from 0 to 128 [ 66.773514][ T5875] FAT-fs (loop4): Directory bread(block 162) failed [ 66.780390][ T5875] FAT-fs (loop4): Directory bread(block 163) failed [ 66.787083][ T5875] FAT-fs (loop4): Directory bread(block 164) failed [ 66.793820][ T5875] FAT-fs (loop4): Directory bread(block 165) failed [ 66.800619][ T5875] FAT-fs (loop4): Directory bread(block 166) failed [ 66.807309][ T5875] FAT-fs (loop4): Directory bread(block 167) failed [ 66.814060][ T5875] FAT-fs (loop4): Directory bread(block 168) failed [ 66.820734][ T5875] FAT-fs (loop4): Directory bread(block 169) failed [ 66.829536][ T5875] FAT-fs (loop4): Directory bread(block 162) failed [ 66.836130][ T5875] FAT-fs (loop4): Directory bread(block 163) failed [ 66.843190][ T5875] syz.4.573: attempt to access beyond end of device [ 66.843190][ T5875] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 66.856310][ T5875] syz.4.573: attempt to access beyond end of device [ 66.856310][ T5875] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 66.945152][ T5883] loop5: detected capacity change from 0 to 512 [ 66.952111][ T5885] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 66.962527][ T5885] SELinux: failed to load policy [ 66.971275][ T5883] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.982013][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.995560][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.029870][ T5883] EXT4-fs (loop5): 1 truncate cleaned up [ 67.033142][ T5895] FAULT_INJECTION: forcing a failure. [ 67.033142][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 67.039495][ T5883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.048438][ T5895] CPU: 1 UID: 0 PID: 5895 Comm: syz.4.580 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 67.048511][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.048523][ T5895] Call Trace: [ 67.048528][ T5895] [ 67.048536][ T5895] __dump_stack+0x1d/0x30 [ 67.048557][ T5895] dump_stack_lvl+0xe8/0x140 [ 67.048576][ T5895] dump_stack+0x15/0x1b [ 67.048593][ T5895] should_fail_ex+0x265/0x280 [ 67.048657][ T5895] should_failslab+0x8c/0xb0 [ 67.048689][ T5895] __kmalloc_noprof+0xa5/0x3e0 [ 67.048745][ T5895] ? p9_client_prepare_req+0x27c/0x820 [ 67.048766][ T5895] p9_client_prepare_req+0x27c/0x820 [ 67.048788][ T5895] ? __account_obj_stock+0x211/0x350 [ 67.048812][ T5895] p9_client_rpc+0xdf/0x6c0 [ 67.048851][ T5895] p9_client_write+0x1e4/0x4c0 [ 67.048879][ T5895] ? mempool_alloc_noprof+0xb0/0x2a0 [ 67.048934][ T5895] v9fs_issue_write+0x72/0x100 [ 67.048957][ T5895] netfs_issue_write+0x95/0x180 [ 67.048978][ T5895] netfs_unbuffered_write+0x18f/0x240 [ 67.048999][ T5895] netfs_unbuffered_write_iter_locked+0x2ae/0x400 [ 67.049061][ T5895] netfs_unbuffered_write_iter+0x2a0/0x380 [ 67.049162][ T5895] v9fs_file_write_iter+0x61/0x80 [ 67.049185][ T5895] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 67.049207][ T5895] vfs_write+0x4a0/0x8e0 [ 67.049241][ T5895] ksys_write+0xda/0x1a0 [ 67.049332][ T5895] __x64_sys_write+0x40/0x50 [ 67.049362][ T5895] x64_sys_call+0x2cdd/0x2fb0 [ 67.049383][ T5895] do_syscall_64+0xd2/0x200 [ 67.049401][ T5895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.049430][ T5895] ? clear_bhb_loop+0x40/0x90 [ 67.049524][ T5895] ? clear_bhb_loop+0x40/0x90 [ 67.049545][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.049565][ T5895] RIP: 0033:0x7f055834e929 [ 67.049581][ T5895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.049608][ T5895] RSP: 002b:00007f05569b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.049657][ T5895] RAX: ffffffffffffffda RBX: 00007f0558575fa0 RCX: 00007f055834e929 [ 67.049669][ T5895] RDX: 0000000000000020 RSI: 0000200000000700 RDI: 0000000000000007 [ 67.049682][ T5895] RBP: 00007f05569b7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.049694][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.049706][ T5895] R13: 0000000000000000 R14: 00007f0558575fa0 R15: 00007ffeffc17fc8 [ 67.049724][ T5895] [ 67.062892][ T5898] 9pnet_fd: p9_fd_create_unix (5898): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 67.231344][ T5883] FAULT_INJECTION: forcing a failure. [ 67.231344][ T5883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.234199][ T5899] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.576: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 67.253453][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.5.576 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 67.253481][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.253505][ T5883] Call Trace: [ 67.253512][ T5883] [ 67.253520][ T5883] __dump_stack+0x1d/0x30 [ 67.253542][ T5883] dump_stack_lvl+0xe8/0x140 [ 67.253585][ T5883] dump_stack+0x15/0x1b [ 67.253600][ T5883] should_fail_ex+0x265/0x280 [ 67.253628][ T5883] should_fail+0xb/0x20 [ 67.253661][ T5883] should_fail_usercopy+0x1a/0x20 [ 67.253716][ T5883] _copy_to_user+0x20/0xa0 [ 67.253807][ T5883] copy_siginfo_to_user+0x22/0xb0 [ 67.253828][ T5883] x64_setup_rt_frame+0x2b5/0x580 [ 67.253850][ T5883] arch_do_signal_or_restart+0x27c/0x480 [ 67.253874][ T5883] exit_to_user_mode_loop+0x7a/0x100 [ 67.253897][ T5883] do_syscall_64+0x1d6/0x200 [ 67.253936][ T5883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.254011][ T5883] ? clear_bhb_loop+0x40/0x90 [ 67.254064][ T5883] ? clear_bhb_loop+0x40/0x90 [ 67.254085][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.254106][ T5883] RIP: 0033:0x7fc99b30e927 [ 67.254122][ T5883] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 67.254138][ T5883] RSP: 002b:00007fc999977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.254234][ T5883] RAX: 0000000000000000 RBX: 00007fc99b535fa0 RCX: 00007fc99b30e929 [ 67.254246][ T5883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 67.254258][ T5883] RBP: 00007fc999977090 R08: 0000000000000000 R09: 0000000000000000 [ 67.254270][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.254282][ T5883] R13: 0000000000000000 R14: 00007fc99b535fa0 R15: 00007ffc1016ad38 [ 67.254299][ T5883] [ 67.639193][ T5899] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem [ 67.709567][ T5911] loop3: detected capacity change from 0 to 1024 [ 67.748127][ T5911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.779484][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.794083][ T5920] tipc: Started in network mode [ 67.799101][ T5920] tipc: Node identity 763b26572e9c, cluster identity 4711 [ 67.806283][ T5920] tipc: Enabled bearer , priority 0 [ 67.814670][ T5911] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.587: error while reading EA inode 20 err=-116 [ 67.850221][ T5924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.592'. [ 67.866975][ T5911] EXT4-fs (loop3): Remounting filesystem read-only [ 67.874693][ T5925] tipc: New replicast peer: 255.255.255.255 [ 67.880826][ T5925] tipc: Enabled bearer , priority 10 [ 67.901326][ T5911] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #19: comm syz.3.587: dec ref error=-30 [ 67.953754][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.974030][ T5933] FAULT_INJECTION: forcing a failure. [ 67.974030][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.974615][ T5919] tipc: Disabling bearer [ 67.987158][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 67.987265][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.987275][ T5933] Call Trace: [ 67.987284][ T5933] [ 67.987292][ T5933] __dump_stack+0x1d/0x30 [ 67.987313][ T5933] dump_stack_lvl+0xe8/0x140 [ 67.987332][ T5933] dump_stack+0x15/0x1b [ 67.987349][ T5933] should_fail_ex+0x265/0x280 [ 67.987400][ T5933] should_fail+0xb/0x20 [ 67.987425][ T5933] should_fail_usercopy+0x1a/0x20 [ 67.987532][ T5933] _copy_from_iter+0xcf/0xe40 [ 67.987562][ T5933] ? __build_skb_around+0x1a0/0x200 [ 67.987591][ T5933] ? __alloc_skb+0x223/0x320 [ 67.987622][ T5933] netlink_sendmsg+0x471/0x6b0 [ 67.987699][ T5933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.987718][ T5933] __sock_sendmsg+0x145/0x180 [ 67.987821][ T5933] ____sys_sendmsg+0x31e/0x4e0 [ 67.987855][ T5933] ___sys_sendmsg+0x17b/0x1d0 [ 67.987898][ T5933] __x64_sys_sendmsg+0xd4/0x160 [ 67.987955][ T5933] x64_sys_call+0x2999/0x2fb0 [ 67.987976][ T5933] do_syscall_64+0xd2/0x200 [ 67.987995][ T5933] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.988046][ T5933] ? clear_bhb_loop+0x40/0x90 [ 67.988066][ T5933] ? clear_bhb_loop+0x40/0x90 [ 67.988087][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.988144][ T5933] RIP: 0033:0x7f96a56be929 [ 67.988160][ T5933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.988176][ T5933] RSP: 002b:00007f96a3d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.988195][ T5933] RAX: ffffffffffffffda RBX: 00007f96a58e5fa0 RCX: 00007f96a56be929 [ 67.988207][ T5933] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000005 [ 67.988220][ T5933] RBP: 00007f96a3d27090 R08: 0000000000000000 R09: 0000000000000000 [ 67.988307][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.988319][ T5933] R13: 0000000000000000 R14: 00007f96a58e5fa0 R15: 00007ffe1860aa68 [ 67.988337][ T5933] [ 68.340708][ T5950] FAULT_INJECTION: forcing a failure. [ 68.340708][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 68.340737][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.4.600 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 68.340765][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.340777][ T5950] Call Trace: [ 68.340783][ T5950] [ 68.340846][ T5950] __dump_stack+0x1d/0x30 [ 68.340866][ T5950] dump_stack_lvl+0xe8/0x140 [ 68.340885][ T5950] dump_stack+0x15/0x1b [ 68.340902][ T5950] should_fail_ex+0x265/0x280 [ 68.340932][ T5950] should_failslab+0x8c/0xb0 [ 68.340964][ T5950] __kmalloc_cache_node_noprof+0x54/0x320 [ 68.340988][ T5950] ? __get_vm_area_node+0x106/0x1d0 [ 68.341035][ T5950] __get_vm_area_node+0x106/0x1d0 [ 68.341064][ T5950] __vmalloc_node_range_noprof+0x273/0xe00 [ 68.341095][ T5950] ? vc_do_resize+0x273/0xd70 [ 68.341123][ T5950] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 68.341207][ T5950] ? __rcu_read_unlock+0x4f/0x70 [ 68.341226][ T5950] ? __lruvec_stat_mod_folio+0xea/0x120 [ 68.341249][ T5950] ? ___kmalloc_large_node+0xb7/0x140 [ 68.341293][ T5950] ? vc_do_resize+0x273/0xd70 [ 68.341320][ T5950] vzalloc_noprof+0x82/0xc0 [ 68.341343][ T5950] ? vc_do_resize+0x273/0xd70 [ 68.341365][ T5950] vc_do_resize+0x273/0xd70 [ 68.341460][ T5950] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 68.341575][ T5950] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 68.341601][ T5950] ? vgacon_set_cursor_size+0x2b3/0x310 [ 68.341629][ T5950] __vc_resize+0x3c/0x50 [ 68.341725][ T5950] vgacon_adjust_height+0x3cb/0x450 [ 68.341754][ T5950] vgacon_font_set+0x191/0x1b0 [ 68.341778][ T5950] ? __pfx_vgacon_font_set+0x10/0x10 [ 68.341857][ T5950] con_font_op+0x8b9/0x930 [ 68.341886][ T5950] vt_ioctl+0x153c/0x1880 [ 68.341967][ T5950] tty_ioctl+0x7db/0xb80 [ 68.341992][ T5950] ? __pfx_tty_ioctl+0x10/0x10 [ 68.342019][ T5950] __se_sys_ioctl+0xce/0x140 [ 68.342079][ T5950] __x64_sys_ioctl+0x43/0x50 [ 68.342134][ T5950] x64_sys_call+0x19a8/0x2fb0 [ 68.342151][ T5950] do_syscall_64+0xd2/0x200 [ 68.342167][ T5950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.342219][ T5950] ? clear_bhb_loop+0x40/0x90 [ 68.342248][ T5950] ? clear_bhb_loop+0x40/0x90 [ 68.342265][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.342328][ T5950] RIP: 0033:0x7f055834e929 [ 68.342341][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.342354][ T5950] RSP: 002b:00007f05569b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.342368][ T5950] RAX: ffffffffffffffda RBX: 00007f0558575fa0 RCX: 00007f055834e929 [ 68.342377][ T5950] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000006 [ 68.342386][ T5950] RBP: 00007f05569b7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.342408][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.342417][ T5950] R13: 0000000000000000 R14: 00007f0558575fa0 R15: 00007ffeffc17fc8 [ 68.342430][ T5950] [ 68.342448][ T5950] syz.4.600: vmalloc error: size 26240, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 68.342499][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.4.600 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 68.342592][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.342601][ T5950] Call Trace: [ 68.342606][ T5950] [ 68.342612][ T5950] __dump_stack+0x1d/0x30 [ 68.342627][ T5950] dump_stack_lvl+0xe8/0x140 [ 68.342642][ T5950] dump_stack+0x15/0x1b [ 68.342711][ T5950] warn_alloc+0x12b/0x1a0 [ 68.342817][ T5950] __vmalloc_node_range_noprof+0x297/0xe00 [ 68.342895][ T5950] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 68.342925][ T5950] ? __rcu_read_unlock+0x4f/0x70 [ 68.342945][ T5950] ? __lruvec_stat_mod_folio+0xea/0x120 [ 68.343023][ T5950] ? ___kmalloc_large_node+0xb7/0x140 [ 68.343049][ T5950] ? vc_do_resize+0x273/0xd70 [ 68.343076][ T5950] vzalloc_noprof+0x82/0xc0 [ 68.343175][ T5950] ? vc_do_resize+0x273/0xd70 [ 68.343196][ T5950] vc_do_resize+0x273/0xd70 [ 68.343222][ T5950] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 68.343245][ T5950] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 68.343309][ T5950] ? vgacon_set_cursor_size+0x2b3/0x310 [ 68.343352][ T5950] __vc_resize+0x3c/0x50 [ 68.343377][ T5950] vgacon_adjust_height+0x3cb/0x450 [ 68.343461][ T5950] vgacon_font_set+0x191/0x1b0 [ 68.343482][ T5950] ? __pfx_vgacon_font_set+0x10/0x10 [ 68.343544][ T5950] con_font_op+0x8b9/0x930 [ 68.343571][ T5950] vt_ioctl+0x153c/0x1880 [ 68.343598][ T5950] tty_ioctl+0x7db/0xb80 [ 68.343676][ T5950] ? __pfx_tty_ioctl+0x10/0x10 [ 68.343768][ T5950] __se_sys_ioctl+0xce/0x140 [ 68.343809][ T5950] __x64_sys_ioctl+0x43/0x50 [ 68.343894][ T5950] x64_sys_call+0x19a8/0x2fb0 [ 68.343916][ T5950] do_syscall_64+0xd2/0x200 [ 68.343934][ T5950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.343955][ T5950] ? clear_bhb_loop+0x40/0x90 [ 68.343982][ T5950] ? clear_bhb_loop+0x40/0x90 [ 68.344003][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.344024][ T5950] RIP: 0033:0x7f055834e929 [ 68.344038][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.344055][ T5950] RSP: 002b:00007f05569b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.344095][ T5950] RAX: ffffffffffffffda RBX: 00007f0558575fa0 RCX: 00007f055834e929 [ 68.344106][ T5950] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000006 [ 68.344116][ T5950] RBP: 00007f05569b7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.344149][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.344162][ T5950] R13: 0000000000000000 R14: 00007f0558575fa0 R15: 00007ffeffc17fc8 [ 68.344180][ T5950] [ 68.344261][ T5950] Mem-Info: [ 68.344267][ T5950] active_anon:10264 inactive_anon:0 isolated_anon:0 [ 68.344267][ T5950] active_file:7406 inactive_file:11514 isolated_file:0 [ 68.344267][ T5950] unevictable:0 dirty:628 writeback:0 [ 68.344267][ T5950] slab_reclaimable:3178 slab_unreclaimable:29028 [ 68.344267][ T5950] mapped:31799 shmem:2496 pagetables:1291 [ 68.344267][ T5950] sec_pagetables:0 bounce:0 [ 68.344267][ T5950] kernel_misc_reclaimable:0 [ 68.344267][ T5950] free:1732684 free_pcp:18489 free_cma:0 [ 68.344334][ T5950] Node 0 active_anon:41056kB inactive_anon:0kB active_file:29624kB inactive_file:46056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127196kB dirty:2512kB writeback:0kB shmem:9984kB writeback_tmp:0kB kernel_stack:3584kB pagetables:5164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 68.344488][ T5950] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.344552][ T5950] lowmem_reserve[]: 0 2882 7860 7860 [ 68.344593][ T5950] Node 0 DMA32 free:2947724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 68.344688][ T5950] lowmem_reserve[]: 0 0 4978 4978 [ 68.344713][ T5950] Node 0 Normal free:3967652kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41056kB inactive_anon:0kB active_file:29624kB inactive_file:46056kB unevictable:0kB writepending:2512kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:70332kB local_pcp:39276kB free_cma:0kB [ 68.344810][ T5950] lowmem_reserve[]: 0 0 0 0 [ 68.344838][ T5950] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 68.345059][ T5950] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947724kB [ 68.345307][ T5950] Node 0 Normal: 2101*4kB (UME) 576*8kB (UME) 329*16kB (UME) 218*32kB (UME) 61*64kB (UM) 47*128kB (UME) 33*256kB (UM) 28*512kB (UME) 16*1024kB (UM) 3*2048kB (UME) 949*4096kB (M) = 3967588kB [ 68.345577][ T5950] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 68.345592][ T5950] 21383 total pagecache pages [ 68.345598][ T5950] 0 pages in swap cache [ 68.345603][ T5950] Free swap = 124996kB [ 68.345609][ T5950] Total swap = 124996kB [ 68.345615][ T5950] 2097051 pages RAM [ 68.345620][ T5950] 0 pages HighMem/MovableOnly [ 68.345625][ T5950] 80813 pages reserved [ 68.396608][ T5937] infiniband syz0: set down [ 68.396622][ T5937] infiniband syz0: added ipvlan1 [ 68.417616][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. [ 68.417632][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.591'. [ 68.447613][ T5937] RDS/IB: syz0: added [ 68.447633][ T5937] smc: adding ib device syz0 with port count 1 [ 68.447645][ T5937] smc: ib device syz0 port 1 has pnetid [ 68.530398][ T5958] loop3: detected capacity change from 0 to 128 [ 68.909099][ T3379] tipc: Node number set to 1487349335 [ 68.914748][ T5958] FAT-fs (loop3): Directory bread(block 162) failed [ 69.344127][ T5958] FAT-fs (loop3): Directory bread(block 163) failed [ 69.350891][ T5958] FAT-fs (loop3): Directory bread(block 164) failed [ 69.357609][ T5958] FAT-fs (loop3): Directory bread(block 165) failed [ 69.364514][ T5958] FAT-fs (loop3): Directory bread(block 166) failed [ 69.371242][ T5958] FAT-fs (loop3): Directory bread(block 167) failed [ 69.377959][ T5958] FAT-fs (loop3): Directory bread(block 168) failed [ 69.399092][ T5958] FAT-fs (loop3): Directory bread(block 169) failed [ 69.411514][ T5958] FAT-fs (loop3): Directory bread(block 162) failed [ 69.426376][ T5958] FAT-fs (loop3): Directory bread(block 163) failed [ 69.442961][ T5958] syz.3.602: attempt to access beyond end of device [ 69.442961][ T5958] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 69.460645][ T5958] syz.3.602: attempt to access beyond end of device [ 69.460645][ T5958] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 69.477914][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 69.477928][ T29] audit: type=1400 audit(2000000030.590:1261): avc: denied { create } for pid=5977 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.530983][ T29] audit: type=1400 audit(2000000030.620:1262): avc: denied { write } for pid=5977 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.551115][ T29] audit: type=1400 audit(2000000030.630:1263): avc: denied { write } for pid=5973 comm="syz.5.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.571697][ T29] audit: type=1400 audit(2000000030.630:1264): avc: denied { module_request } for pid=5973 comm="syz.5.606" kmod="nft-expr-7-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 69.611122][ T29] audit: type=1400 audit(2000000030.710:1265): avc: denied { allowed } for pid=5982 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.630508][ T29] audit: type=1400 audit(2000000030.710:1266): avc: denied { create } for pid=5982 comm="syz.0.610" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.651673][ T29] audit: type=1400 audit(2000000030.710:1267): avc: denied { map } for pid=5982 comm="syz.0.610" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.659644][ T5988] vhci_hcd: invalid port number 23 [ 69.675812][ T29] audit: type=1400 audit(2000000030.710:1268): avc: denied { read write } for pid=5982 comm="syz.0.610" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.680951][ T5988] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 69.712986][ T29] audit: type=1400 audit(2000000030.710:1269): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.733117][ T29] audit: type=1400 audit(2000000030.740:1270): avc: denied { map } for pid=5987 comm="syz.4.612" path="socket:[10977]" dev="sockfs" ino=10977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.831326][ T6003] loop3: detected capacity change from 0 to 512 [ 69.872106][ T6016] loop4: detected capacity change from 0 to 128 [ 69.884954][ T6016] FAT-fs (loop4): Directory bread(block 162) failed [ 69.892818][ T6016] FAT-fs (loop4): Directory bread(block 163) failed [ 69.897191][ T6010] loop5: detected capacity change from 0 to 512 [ 69.908416][ T6003] EXT4-fs (loop3): 1 orphan inode deleted [ 69.913983][ T6016] FAT-fs (loop4): Directory bread(block 164) failed [ 69.923348][ T6016] FAT-fs (loop4): Directory bread(block 165) failed [ 69.930693][ T6016] FAT-fs (loop4): Directory bread(block 166) failed [ 69.930840][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 69.938368][ T6016] FAT-fs (loop4): Directory bread(block 167) failed [ 69.957118][ T6016] FAT-fs (loop4): Directory bread(block 168) failed [ 69.963831][ T6016] FAT-fs (loop4): Directory bread(block 169) failed [ 69.968495][ T6003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.978465][ T6016] FAT-fs (loop4): Directory bread(block 162) failed [ 69.986879][ T6003] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.990799][ T6016] FAT-fs (loop4): Directory bread(block 163) failed [ 70.008979][ T6003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.011909][ T6010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.032555][ T6010] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.076827][ T6026] netlink: 'syz.2.623': attribute type 27 has an invalid length. [ 70.085045][ T6026] lo: left allmulticast mode [ 70.089906][ T6026] tunl0: left allmulticast mode [ 70.095007][ T6026] gre0: left allmulticast mode [ 70.100051][ T6026] gretap0: left allmulticast mode [ 70.105548][ T6026] erspan0: left allmulticast mode [ 70.110857][ T6026] ip_vti0: left allmulticast mode [ 70.116018][ T6026] ip6_vti0: left allmulticast mode [ 70.121228][ T6026] sit0: left allmulticast mode [ 70.126185][ T6026] ip6tnl0: left allmulticast mode [ 70.131502][ T6026] ip6gre0: left allmulticast mode [ 70.136830][ T6026] syz_tun: left allmulticast mode [ 70.142040][ T6026] ip6gretap0: left allmulticast mode [ 70.147573][ T6026] vcan0: left allmulticast mode [ 70.152546][ T6026] bond0: left allmulticast mode [ 70.157656][ T6026] team0: left allmulticast mode [ 70.162728][ T6026] dummy0: left allmulticast mode [ 70.167786][ T6026] nlmon0: left allmulticast mode [ 70.172946][ T6026] caif0: left allmulticast mode [ 70.177949][ T6026] vxcan0: left allmulticast mode [ 70.183529][ T6026] vxcan1: left allmulticast mode [ 70.188534][ T6026] veth0: left allmulticast mode [ 70.193724][ T6026] veth1: left allmulticast mode [ 70.198972][ T6026] wg1: left allmulticast mode [ 70.203781][ T6026] wg2: left allmulticast mode [ 70.208516][ T6026] veth0_to_bridge: left allmulticast mode [ 70.209633][ T6010] vhci_hcd: invalid port number 96 [ 70.214342][ T6026] bridge_slave_0: left allmulticast mode [ 70.219388][ T6010] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 70.230626][ T6010] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.617: corrupted inode contents [ 70.232149][ T6026] veth1_to_bridge: left allmulticast mode [ 70.245093][ T6010] EXT4-fs (loop5): Remounting filesystem read-only [ 70.249627][ T6026] bridge_slave_1: left allmulticast mode [ 70.256144][ T6010] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 70.261861][ T6026] veth0_to_bond: left allmulticast mode [ 70.276534][ T6026] ÿ: left allmulticast mode [ 70.281278][ T6026] veth1_to_bond: left allmulticast mode [ 70.286915][ T6026] bond_slave_1: left allmulticast mode [ 70.292590][ T6026] veth0_to_team: left allmulticast mode [ 70.298225][ T6026] team_slave_0: left allmulticast mode [ 70.303964][ T6026] veth1_to_team: left allmulticast mode [ 70.309646][ T6026] team_slave_1: left allmulticast mode [ 70.315205][ T6026] veth0_to_batadv: left allmulticast mode [ 70.321109][ T6026] batadv_slave_0: left allmulticast mode [ 70.327012][ T6026] veth1_to_batadv: left allmulticast mode [ 70.332846][ T6026] batadv_slave_1: left allmulticast mode [ 70.338719][ T6026] xfrm0: left allmulticast mode [ 70.343739][ T6026] veth0_to_hsr: left allmulticast mode [ 70.349386][ T6026] hsr_slave_0: left allmulticast mode [ 70.354807][ T6026] veth1_virt_wifi: left allmulticast mode [ 70.360728][ T6026] veth0_virt_wifi: left allmulticast mode [ 70.366645][ T6026] veth1_vlan: left allmulticast mode [ 70.372278][ T6026] vlan0: left allmulticast mode [ 70.377186][ T6026] vlan1: left allmulticast mode [ 70.382199][ T6026] macvlan0: left allmulticast mode [ 70.387518][ T6026] macvlan1: left allmulticast mode [ 70.392743][ T6026] ipvlan0: left allmulticast mode [ 70.397865][ T6026] ipvlan1: left allmulticast mode [ 70.403032][ T6026] veth0_vlan: left allmulticast mode [ 70.408350][ T6026] veth1_macvtap: left allmulticast mode [ 70.414046][ T6026] veth0_macvtap: left allmulticast mode [ 70.419781][ T6026] macvtap0: left allmulticast mode [ 70.425079][ T6026] macsec0: left allmulticast mode [ 70.430497][ T6026] geneve0: left allmulticast mode [ 70.435618][ T6026] geneve1: left allmulticast mode [ 70.440856][ T6026] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 70.448217][ T6026] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 70.455627][ T6026] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 70.462983][ T6026] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 70.470250][ T6026] veth2: left allmulticast mode [ 70.475224][ T6026] veth3: left allmulticast mode [ 70.480247][ T6026] erspan1: left allmulticast mode [ 70.524427][ T6034] tipc: Enabled bearer , priority 0 [ 70.536253][ T6027] tipc: Disabling bearer [ 70.561220][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.648512][ T6055] __nla_validate_parse: 23 callbacks suppressed [ 70.648528][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'. [ 70.689808][ T6061] FAULT_INJECTION: forcing a failure. [ 70.689808][ T6061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.702965][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.2.634 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 70.702991][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.703003][ T6061] Call Trace: [ 70.703009][ T6061] [ 70.703016][ T6061] __dump_stack+0x1d/0x30 [ 70.703036][ T6061] dump_stack_lvl+0xe8/0x140 [ 70.703054][ T6061] dump_stack+0x15/0x1b [ 70.703126][ T6061] should_fail_ex+0x265/0x280 [ 70.703171][ T6061] should_fail+0xb/0x20 [ 70.703276][ T6061] should_fail_usercopy+0x1a/0x20 [ 70.703338][ T6061] _copy_from_user+0x1c/0xb0 [ 70.703356][ T6061] ipv6_mcast_join_leave+0x93/0x160 [ 70.703443][ T6061] do_ipv6_setsockopt+0x162a/0x22e0 [ 70.703465][ T6061] ? kstrtoull+0x111/0x140 [ 70.703488][ T6061] ? __rcu_read_unlock+0x4f/0x70 [ 70.703523][ T6061] ? avc_has_perm_noaudit+0x1b1/0x200 [ 70.703574][ T6061] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 70.703620][ T6061] ipv6_setsockopt+0x59/0x130 [ 70.703640][ T6061] tcp_setsockopt+0x95/0xb0 [ 70.703666][ T6061] sock_common_setsockopt+0x66/0x80 [ 70.703798][ T6061] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 70.703849][ T6061] __sys_setsockopt+0x181/0x200 [ 70.703940][ T6061] __x64_sys_setsockopt+0x64/0x80 [ 70.703973][ T6061] x64_sys_call+0x2bd5/0x2fb0 [ 70.703991][ T6061] do_syscall_64+0xd2/0x200 [ 70.704007][ T6061] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.704031][ T6061] ? clear_bhb_loop+0x40/0x90 [ 70.704062][ T6061] ? clear_bhb_loop+0x40/0x90 [ 70.704084][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.704169][ T6061] RIP: 0033:0x7fdaa859e929 [ 70.704185][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.704240][ T6061] RSP: 002b:00007fdaa6c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.704260][ T6061] RAX: ffffffffffffffda RBX: 00007fdaa87c5fa0 RCX: 00007fdaa859e929 [ 70.704273][ T6061] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 70.704287][ T6061] RBP: 00007fdaa6c07090 R08: 0000000000000088 R09: 0000000000000000 [ 70.704340][ T6061] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 70.704352][ T6061] R13: 0000000000000000 R14: 00007fdaa87c5fa0 R15: 00007ffd326421b8 [ 70.704372][ T6061] [ 70.941876][ T6063] FAULT_INJECTION: forcing a failure. [ 70.941876][ T6063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.955239][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz.5.633 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 70.955310][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.955320][ T6063] Call Trace: [ 70.955324][ T6063] [ 70.955330][ T6063] __dump_stack+0x1d/0x30 [ 70.955379][ T6063] dump_stack_lvl+0xe8/0x140 [ 70.955399][ T6063] dump_stack+0x15/0x1b [ 70.955485][ T6063] should_fail_ex+0x265/0x280 [ 70.955511][ T6063] should_fail_alloc_page+0xf2/0x100 [ 70.955586][ T6063] __alloc_frozen_pages_noprof+0xff/0x360 [ 70.955622][ T6063] alloc_pages_mpol+0xb3/0x250 [ 70.955651][ T6063] vma_alloc_folio_noprof+0x1aa/0x300 [ 70.955730][ T6063] do_wp_page+0x673/0x2400 [ 70.955748][ T6063] ? __rcu_read_lock+0x37/0x50 [ 70.955771][ T6063] handle_mm_fault+0x77d/0x2be0 [ 70.955827][ T6063] ? __rcu_read_unlock+0x4f/0x70 [ 70.955850][ T6063] do_user_addr_fault+0x3fe/0x1090 [ 70.955879][ T6063] exc_page_fault+0x62/0xa0 [ 70.955985][ T6063] asm_exc_page_fault+0x26/0x30 [ 70.956002][ T6063] RIP: 0010:__put_user_4+0xd/0x20 [ 70.956032][ T6063] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 70.956046][ T6063] RSP: 0018:ffffc90010957d80 EFLAGS: 00050202 [ 70.956059][ T6063] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000bd038 [ 70.956134][ T6063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.956221][ T6063] RBP: 0000000000040000 R08: 0001c90010957c07 R09: 0000000000000000 [ 70.956232][ T6063] R10: ffffffff00000000 R11: ffffffff84457fe0 R12: 0000000000000000 [ 70.956245][ T6063] R13: 00002000000bd000 R14: 00002000000bd000 R15: 0000000000000317 [ 70.956268][ T6063] ? __pfx_sock_def_readable+0x10/0x10 [ 70.956291][ T6063] __sys_sendmmsg+0x19b/0x300 [ 70.956314][ T6063] __x64_sys_sendmmsg+0x57/0x70 [ 70.956331][ T6063] x64_sys_call+0x2f2f/0x2fb0 [ 70.956423][ T6063] do_syscall_64+0xd2/0x200 [ 70.956438][ T6063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.956501][ T6063] ? clear_bhb_loop+0x40/0x90 [ 70.956521][ T6063] ? clear_bhb_loop+0x40/0x90 [ 70.956543][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.956559][ T6063] RIP: 0033:0x7fc99b30e929 [ 70.956572][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.956645][ T6063] RSP: 002b:00007fc999956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.956730][ T6063] RAX: ffffffffffffffda RBX: 00007fc99b536080 RCX: 00007fc99b30e929 [ 70.956742][ T6063] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 70.956755][ T6063] RBP: 00007fc999956090 R08: 0000000000000000 R09: 0000000000000000 [ 70.956766][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.956776][ T6063] R13: 0000000000000000 R14: 00007fc99b536080 R15: 00007ffc1016ad38 [ 70.956791][ T6063] [ 71.285279][ T6072] serio: Serial port ptm0 [ 71.326036][ T6079] tipc: Enabled bearer , priority 0 [ 71.342334][ T6083] random: crng reseeded on system resumption [ 71.385739][ T6087] tipc: Enabling of bearer rejected, already enabled [ 71.406096][ T6089] netlink: 268 bytes leftover after parsing attributes in process `syz.2.644'. [ 71.415207][ T6089] unsupported nla_type 65024 [ 71.465250][ T6086] loop5: detected capacity change from 0 to 8192 [ 71.486752][ T6078] tipc: Disabling bearer [ 71.525648][ T6086] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 71.534377][ T6086] FAT-fs (loop5): Filesystem has been set read-only [ 71.651366][ T6104] loop5: detected capacity change from 0 to 512 [ 71.679721][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.699344][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.700372][ T6104] EXT4-fs (loop5): 1 orphan inode deleted [ 71.709029][ T6108] loop3: detected capacity change from 0 to 2048 [ 71.719707][ T1455] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 71.721150][ T6104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.744597][ T6104] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.764880][ T6104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.776026][ T6108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.805816][ T6117] FAULT_INJECTION: forcing a failure. [ 71.805816][ T6117] name failslab, interval 1, probability 0, space 0, times 0 [ 71.818514][ T6117] CPU: 0 UID: 0 PID: 6117 Comm: syz.0.655 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 71.818541][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.818553][ T6117] Call Trace: [ 71.818560][ T6117] [ 71.818644][ T6117] __dump_stack+0x1d/0x30 [ 71.818730][ T6117] dump_stack_lvl+0xe8/0x140 [ 71.818747][ T6117] dump_stack+0x15/0x1b [ 71.818762][ T6117] should_fail_ex+0x265/0x280 [ 71.818791][ T6117] ? ip_set_create+0x1ec/0x960 [ 71.818892][ T6117] should_failslab+0x8c/0xb0 [ 71.818916][ T6117] __kmalloc_cache_noprof+0x4c/0x320 [ 71.819008][ T6117] ip_set_create+0x1ec/0x960 [ 71.819046][ T6117] ? __nla_parse+0x40/0x60 [ 71.819098][ T6117] nfnetlink_rcv_msg+0x4c6/0x590 [ 71.819134][ T6117] ? selinux_capable+0x1f9/0x270 [ 71.819160][ T6117] netlink_rcv_skb+0x123/0x220 [ 71.819214][ T6117] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 71.819241][ T6117] nfnetlink_rcv+0x16b/0x1690 [ 71.819263][ T6117] ? __account_obj_stock+0x211/0x350 [ 71.819330][ T6117] ? obj_cgroup_charge_account+0x122/0x1a0 [ 71.819411][ T6117] ? should_fail_ex+0x30/0x280 [ 71.819434][ T6117] ? xas_load+0x413/0x430 [ 71.819460][ T6117] ? xas_load+0x413/0x430 [ 71.819554][ T6117] ? __rcu_read_unlock+0x4f/0x70 [ 71.819577][ T6117] ? xa_load+0xb1/0xe0 [ 71.819598][ T6117] ? __account_obj_stock+0x211/0x350 [ 71.819623][ T6117] ? obj_cgroup_charge_account+0x122/0x1a0 [ 71.819658][ T6117] ? should_fail_ex+0x30/0x280 [ 71.819685][ T6117] ? __rcu_read_unlock+0x4f/0x70 [ 71.819727][ T6117] ? should_fail_ex+0xdb/0x280 [ 71.819756][ T6117] ? selinux_nlmsg_lookup+0x99/0x890 [ 71.819789][ T6117] ? selinux_netlink_send+0x59f/0x5f0 [ 71.819892][ T6117] ? __rcu_read_unlock+0x34/0x70 [ 71.819909][ T6117] ? __netlink_lookup+0x266/0x2a0 [ 71.819930][ T6117] netlink_unicast+0x5a1/0x670 [ 71.819963][ T6117] netlink_sendmsg+0x58b/0x6b0 [ 71.820046][ T6117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.820067][ T6117] __sock_sendmsg+0x145/0x180 [ 71.820093][ T6117] ____sys_sendmsg+0x31e/0x4e0 [ 71.820155][ T6117] ___sys_sendmsg+0x17b/0x1d0 [ 71.820193][ T6117] __x64_sys_sendmsg+0xd4/0x160 [ 71.820211][ T6117] x64_sys_call+0x2999/0x2fb0 [ 71.820230][ T6117] do_syscall_64+0xd2/0x200 [ 71.820268][ T6117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.820294][ T6117] ? clear_bhb_loop+0x40/0x90 [ 71.820312][ T6117] ? clear_bhb_loop+0x40/0x90 [ 71.820406][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.820424][ T6117] RIP: 0033:0x7f96a56be929 [ 71.820440][ T6117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.820458][ T6117] RSP: 002b:00007f96a3d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.820515][ T6117] RAX: ffffffffffffffda RBX: 00007f96a58e5fa0 RCX: 00007f96a56be929 [ 71.820529][ T6117] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 71.820542][ T6117] RBP: 00007f96a3d27090 R08: 0000000000000000 R09: 0000000000000000 [ 71.820554][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.820637][ T6117] R13: 0000000000000000 R14: 00007f96a58e5fa0 R15: 00007ffe1860aa68 [ 71.820653][ T6117] [ 72.272596][ T6120] loop5: detected capacity change from 0 to 8192 [ 72.287108][ T6120] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.322912][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.388886][ T6127] sctp: [Deprecated]: syz.3.659 (pid 6127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.388886][ T6127] Use struct sctp_sack_info instead [ 72.511422][ T6146] FAULT_INJECTION: forcing a failure. [ 72.511422][ T6146] name failslab, interval 1, probability 0, space 0, times 0 [ 72.524120][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.5.665 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 72.524195][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.524206][ T6146] Call Trace: [ 72.524211][ T6146] [ 72.524218][ T6146] __dump_stack+0x1d/0x30 [ 72.524239][ T6146] dump_stack_lvl+0xe8/0x140 [ 72.524313][ T6146] dump_stack+0x15/0x1b [ 72.524327][ T6146] should_fail_ex+0x265/0x280 [ 72.524475][ T6146] should_failslab+0x8c/0xb0 [ 72.524500][ T6146] kmem_cache_alloc_noprof+0x50/0x310 [ 72.524554][ T6146] ? audit_log_start+0x365/0x6c0 [ 72.524587][ T6146] audit_log_start+0x365/0x6c0 [ 72.524622][ T6146] audit_seccomp+0x48/0x100 [ 72.524676][ T6146] ? __seccomp_filter+0x68c/0x10d0 [ 72.524696][ T6146] __seccomp_filter+0x69d/0x10d0 [ 72.524718][ T6146] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.524746][ T6146] ? vfs_write+0x75e/0x8e0 [ 72.524788][ T6146] __secure_computing+0x82/0x150 [ 72.524840][ T6146] syscall_trace_enter+0xcf/0x1e0 [ 72.524869][ T6146] do_syscall_64+0xac/0x200 [ 72.524888][ T6146] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.524914][ T6146] ? clear_bhb_loop+0x40/0x90 [ 72.524937][ T6146] ? clear_bhb_loop+0x40/0x90 [ 72.525064][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.525085][ T6146] RIP: 0033:0x7fc99b30e929 [ 72.525173][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.525216][ T6146] RSP: 002b:00007fc999977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 [ 72.525234][ T6146] RAX: ffffffffffffffda RBX: 00007fc99b535fa0 RCX: 00007fc99b30e929 [ 72.525245][ T6146] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000002 [ 72.525255][ T6146] RBP: 00007fc999977090 R08: 0000000000000000 R09: 0000000000000000 [ 72.525268][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.525280][ T6146] R13: 0000000000000000 R14: 00007fc99b535fa0 R15: 00007ffc1016ad38 [ 72.525304][ T6146] [ 72.753072][ T6151] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 72.784843][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'. [ 72.793942][ T6148] netlink: 212 bytes leftover after parsing attributes in process `syz.3.666'. [ 72.871565][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.668'. [ 72.888379][ T6159] loop4: detected capacity change from 0 to 128 [ 72.889230][ T6156] hsr_slave_0 (unregistering): left promiscuous mode [ 72.904446][ T6159] FAT-fs (loop4): Directory bread(block 162) failed [ 72.912078][ T6159] FAT-fs (loop4): Directory bread(block 163) failed [ 72.918738][ T6159] FAT-fs (loop4): Directory bread(block 164) failed [ 72.925568][ T6159] FAT-fs (loop4): Directory bread(block 165) failed [ 72.933368][ T6159] FAT-fs (loop4): Directory bread(block 166) failed [ 72.940253][ T6159] FAT-fs (loop4): Directory bread(block 167) failed [ 72.946921][ T6159] FAT-fs (loop4): Directory bread(block 168) failed [ 72.955296][ T6159] FAT-fs (loop4): Directory bread(block 169) failed [ 73.292233][ T6173] netlink: 96 bytes leftover after parsing attributes in process `syz.2.677'. [ 73.375028][ T6173] vhci_hcd: invalid port number 96 [ 73.380211][ T6173] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 73.407703][ T6183] program syz.0.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.476584][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 73.552721][ T6190] tipc: Enabled bearer , priority 0 [ 73.563148][ T6190] tipc: Enabling of bearer rejected, already enabled [ 73.572614][ T6189] tipc: Disabling bearer [ 73.574668][ T6198] netdevsim netdevsim0: Direct firmware load for À failed with error -2 [ 73.930951][ T6214] loop5: detected capacity change from 0 to 2048 [ 73.973632][ T6214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.206159][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.684912][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 74.684975][ T29] audit: type=1326 audit(2000000035.790:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.727223][ T29] audit: type=1326 audit(2000000035.790:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.750857][ T29] audit: type=1326 audit(2000000035.830:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.765999][ T6233] loop5: detected capacity change from 0 to 512 [ 74.774326][ T29] audit: type=1326 audit(2000000035.830:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.803886][ T29] audit: type=1326 audit(2000000035.830:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.827330][ T29] audit: type=1326 audit(2000000035.830:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.850593][ T29] audit: type=1326 audit(2000000035.830:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.874167][ T29] audit: type=1326 audit(2000000035.830:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.897754][ T29] audit: type=1326 audit(2000000035.830:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.921212][ T29] audit: type=1326 audit(2000000035.830:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99b30e929 code=0x7ffc0000 [ 74.959595][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.968058][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.016711][ T6240] FAULT_INJECTION: forcing a failure. [ 75.016711][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.029835][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.0.698 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 75.029861][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.029871][ T6240] Call Trace: [ 75.029877][ T6240] [ 75.029884][ T6240] __dump_stack+0x1d/0x30 [ 75.029903][ T6240] dump_stack_lvl+0xe8/0x140 [ 75.029919][ T6240] dump_stack+0x15/0x1b [ 75.030012][ T6240] should_fail_ex+0x265/0x280 [ 75.030045][ T6240] should_fail+0xb/0x20 [ 75.030145][ T6240] should_fail_usercopy+0x1a/0x20 [ 75.030176][ T6240] _copy_from_user+0x1c/0xb0 [ 75.030270][ T6240] kstrtouint_from_user+0x69/0xf0 [ 75.030300][ T6240] ? 0xffffffff81000000 [ 75.030311][ T6240] ? selinux_file_permission+0x1e4/0x320 [ 75.030334][ T6240] proc_fail_nth_write+0x50/0x160 [ 75.030368][ T6240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.030396][ T6240] vfs_write+0x269/0x8e0 [ 75.030427][ T6240] ? vfs_read+0x47f/0x6f0 [ 75.030507][ T6240] ? __rcu_read_unlock+0x4f/0x70 [ 75.030531][ T6240] ? __fget_files+0x184/0x1c0 [ 75.030553][ T6240] ksys_write+0xda/0x1a0 [ 75.030581][ T6240] __x64_sys_write+0x40/0x50 [ 75.030611][ T6240] x64_sys_call+0x2cdd/0x2fb0 [ 75.030648][ T6240] do_syscall_64+0xd2/0x200 [ 75.030663][ T6240] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.030690][ T6240] ? clear_bhb_loop+0x40/0x90 [ 75.030713][ T6240] ? clear_bhb_loop+0x40/0x90 [ 75.030735][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.030787][ T6240] RIP: 0033:0x7f96a56bd3df [ 75.030802][ T6240] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 75.030818][ T6240] RSP: 002b:00007f96a3d27030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 75.030847][ T6240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96a56bd3df [ 75.030858][ T6240] RDX: 0000000000000001 RSI: 00007f96a3d270a0 RDI: 000000000000000b [ 75.030871][ T6240] RBP: 00007f96a3d27090 R08: 0000000000000000 R09: 0000000000000000 [ 75.030894][ T6240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 75.030908][ T6240] R13: 0000000000000000 R14: 00007f96a58e5fa0 R15: 00007ffe1860aa68 [ 75.030932][ T6240] [ 75.039281][ T6233] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.695: bg 0: block 131: padding at end of block bitmap is not set [ 75.196199][ T6249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.701'. [ 75.274752][ T6233] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 75.292364][ T6233] EXT4-fs (loop5): 1 truncate cleaned up [ 75.298480][ T6233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.418638][ T6245] tipc: Enabling of bearer rejected, already enabled [ 75.531856][ T6266] netlink: 256 bytes leftover after parsing attributes in process `syz.0.707'. [ 75.567582][ T6252] vhci_hcd: invalid port number 96 [ 75.572841][ T6252] vhci_hcd: default hub control req: 6600 vfffb i0060 l0 [ 75.597078][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.648791][ T6277] FAULT_INJECTION: forcing a failure. [ 75.648791][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 75.661523][ T6277] CPU: 1 UID: 0 PID: 6277 Comm: syz.2.706 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 75.661550][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.661561][ T6277] Call Trace: [ 75.661567][ T6277] [ 75.661574][ T6277] __dump_stack+0x1d/0x30 [ 75.661591][ T6277] dump_stack_lvl+0xe8/0x140 [ 75.661606][ T6277] dump_stack+0x15/0x1b [ 75.661619][ T6277] should_fail_ex+0x265/0x280 [ 75.661644][ T6277] should_failslab+0x8c/0xb0 [ 75.661664][ T6277] kmem_cache_alloc_noprof+0x50/0x310 [ 75.661685][ T6277] ? mas_dup_build+0x1f6/0xd30 [ 75.661702][ T6277] mas_dup_build+0x1f6/0xd30 [ 75.661719][ T6277] ? css_rstat_updated+0xcd/0x5b0 [ 75.661750][ T6277] ? mod_memcg_state+0x1eb/0x2c0 [ 75.661770][ T6277] __mt_dup+0xc6/0x180 [ 75.661792][ T6277] dup_mmap+0x266/0xf20 [ 75.661811][ T6277] ? __list_add_valid_or_report+0x38/0xe0 [ 75.661841][ T6277] copy_mm+0x11a/0x370 [ 75.661865][ T6277] copy_process+0xcf1/0x1fe0 [ 75.661894][ T6277] kernel_clone+0x16c/0x5b0 [ 75.661924][ T6277] ? vfs_write+0x75e/0x8e0 [ 75.661954][ T6277] __x64_sys_clone+0xe6/0x120 [ 75.661987][ T6277] x64_sys_call+0x2c59/0x2fb0 [ 75.662006][ T6277] do_syscall_64+0xd2/0x200 [ 75.662024][ T6277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.662049][ T6277] ? clear_bhb_loop+0x40/0x90 [ 75.662069][ T6277] ? clear_bhb_loop+0x40/0x90 [ 75.662090][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.662110][ T6277] RIP: 0033:0x7fdaa859e929 [ 75.662125][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.662138][ T6277] RSP: 002b:00007fdaa6bc4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 75.662154][ T6277] RAX: ffffffffffffffda RBX: 00007fdaa87c6160 RCX: 00007fdaa859e929 [ 75.662164][ T6277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 75.662174][ T6277] RBP: 00007fdaa6bc5090 R08: 0000000000000000 R09: 0000000000000000 [ 75.662184][ T6277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 75.662193][ T6277] R13: 0000000000000000 R14: 00007fdaa87c6160 R15: 00007ffd326421b8 [ 75.662212][ T6277] [ 75.900990][ T6279] loop5: detected capacity change from 0 to 512 [ 76.061473][ T6279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.078631][ T6279] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.116872][ T6281] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 76.243160][ T6289] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 76.396587][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 76.405485][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 76.517299][ T6311] FAULT_INJECTION: forcing a failure. [ 76.517299][ T6311] name failslab, interval 1, probability 0, space 0, times 0 [ 76.530116][ T6311] CPU: 1 UID: 0 PID: 6311 Comm: syz.3.722 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 76.530204][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.530217][ T6311] Call Trace: [ 76.530224][ T6311] [ 76.530232][ T6311] __dump_stack+0x1d/0x30 [ 76.530254][ T6311] dump_stack_lvl+0xe8/0x140 [ 76.530314][ T6311] dump_stack+0x15/0x1b [ 76.530327][ T6311] should_fail_ex+0x265/0x280 [ 76.530352][ T6311] ? nd_alloc_stack+0x50/0xa0 [ 76.530371][ T6311] should_failslab+0x8c/0xb0 [ 76.530436][ T6311] __kmalloc_cache_noprof+0x4c/0x320 [ 76.530461][ T6311] nd_alloc_stack+0x50/0xa0 [ 76.530481][ T6311] pick_link+0x78e/0x830 [ 76.530502][ T6311] ? __d_lookup_rcu+0x248/0x2a0 [ 76.530582][ T6311] step_into+0x7b6/0x820 [ 76.530637][ T6311] ? inode_permission+0x106/0x310 [ 76.530711][ T6311] link_path_walk+0x571/0x900 [ 76.530731][ T6311] __filename_parentat+0x15c/0x3f0 [ 76.530761][ T6311] do_renameat2+0x1ec/0xab0 [ 76.530829][ T6311] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.530941][ T6311] ? __rcu_read_unlock+0x4f/0x70 [ 76.530959][ T6311] ? should_fail_ex+0xdb/0x280 [ 76.530981][ T6311] ? should_fail_ex+0xdb/0x280 [ 76.531067][ T6311] __x64_sys_rename+0x58/0x70 [ 76.531084][ T6311] x64_sys_call+0x2aee/0x2fb0 [ 76.531101][ T6311] do_syscall_64+0xd2/0x200 [ 76.531118][ T6311] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.531218][ T6311] ? clear_bhb_loop+0x40/0x90 [ 76.531309][ T6311] ? clear_bhb_loop+0x40/0x90 [ 76.531327][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.531350][ T6311] RIP: 0033:0x7f7594cae929 [ 76.531366][ T6311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.531383][ T6311] RSP: 002b:00007f7593317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 76.531447][ T6311] RAX: ffffffffffffffda RBX: 00007f7594ed5fa0 RCX: 00007f7594cae929 [ 76.531461][ T6311] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000280 [ 76.531474][ T6311] RBP: 00007f7593317090 R08: 0000000000000000 R09: 0000000000000000 [ 76.531487][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.531498][ T6311] R13: 0000000000000000 R14: 00007f7594ed5fa0 R15: 00007ffd97ca99c8 [ 76.531516][ T6311] [ 76.894381][ T6320] loop3: detected capacity change from 0 to 512 [ 76.914948][ T6322] bond1: entered promiscuous mode [ 76.920111][ T6322] bond1: entered allmulticast mode [ 76.933728][ T6320] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.959801][ T6322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.973030][ T6320] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.990680][ T6327] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 76.999234][ T6320] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.008572][ T6327] loop4: detected capacity change from 0 to 512 [ 77.017240][ T6327] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 77.045724][ T6322] bond1 (unregistering): Released all slaves [ 77.051281][ T6320] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.058647][ T6320] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.725: Invalid block bitmap block 0 in block_group 0 [ 77.108773][ T6320] EXT4-fs (loop3): Remounting filesystem read-only [ 77.130491][ T6320] EXT4-fs (loop3): 1 orphan inode deleted [ 77.149681][ T6320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.197869][ T6333] loop4: detected capacity change from 0 to 2048 [ 77.236291][ T6333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.249284][ T6334] tipc: Enabling of bearer rejected, already enabled [ 77.542231][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.563680][ T6349] netlink: 'syz.5.733': attribute type 27 has an invalid length. [ 77.595655][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.602928][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.643218][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.653695][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.681497][ T6349] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.690678][ T6349] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.699837][ T6349] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.708733][ T6349] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.758660][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.835089][ T6358] netlink: 'syz.5.736': attribute type 4 has an invalid length. [ 77.882131][ T6362] futex_wake_op: syz.3.738 tries to shift op by 32; fix this program [ 77.970337][ T6376] FAULT_INJECTION: forcing a failure. [ 77.970337][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 77.983085][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.5.742 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 77.983109][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.983119][ T6376] Call Trace: [ 77.983124][ T6376] [ 77.983131][ T6376] __dump_stack+0x1d/0x30 [ 77.983150][ T6376] dump_stack_lvl+0xe8/0x140 [ 77.983187][ T6376] dump_stack+0x15/0x1b [ 77.983205][ T6376] should_fail_ex+0x265/0x280 [ 77.983237][ T6376] should_failslab+0x8c/0xb0 [ 77.983326][ T6376] __kmalloc_node_noprof+0xa9/0x410 [ 77.983349][ T6376] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 77.983425][ T6376] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 77.983456][ T6376] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 77.983563][ T6376] ? __lruvec_stat_mod_folio+0xea/0x120 [ 77.983591][ T6376] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 77.983618][ T6376] ? bpf_check+0xe0/0xced0 [ 77.983718][ T6376] vzalloc_noprof+0x82/0xc0 [ 77.983746][ T6376] ? bpf_check+0xe0/0xced0 [ 77.983770][ T6376] bpf_check+0xe0/0xced0 [ 77.983836][ T6376] ? page_counter_charge+0x207/0x230 [ 77.983860][ T6376] ? __rcu_read_unlock+0x4f/0x70 [ 77.983878][ T6376] ? obj_cgroup_charge_pages+0xf7/0x150 [ 77.983903][ T6376] ? __rcu_read_unlock+0x4f/0x70 [ 77.983986][ T6376] ? __memcg_kmem_charge_page+0xd1/0x170 [ 77.984013][ T6376] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 77.984114][ T6376] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 77.984177][ T6376] ? css_rstat_updated+0xcd/0x5b0 [ 77.984205][ T6376] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 77.984229][ T6376] ? pcpu_block_update+0x232/0x3b0 [ 77.984336][ T6376] ? _find_next_zero_bit+0x64/0xa0 [ 77.984357][ T6376] ? pcpu_block_refresh_hint+0x157/0x170 [ 77.984420][ T6376] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 77.984482][ T6376] ? css_rstat_updated+0xcd/0x5b0 [ 77.984508][ T6376] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 77.984539][ T6376] ? mod_memcg_state+0x1eb/0x2c0 [ 77.984566][ T6376] ? __rcu_read_unlock+0x4f/0x70 [ 77.984586][ T6376] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 77.984660][ T6376] ? should_fail_ex+0xdb/0x280 [ 77.984721][ T6376] ? selinux_bpf_prog_load+0x36/0xf0 [ 77.984741][ T6376] ? should_failslab+0x8c/0xb0 [ 77.984839][ T6376] ? __kmalloc_cache_noprof+0x189/0x320 [ 77.984898][ T6376] ? selinux_bpf_prog_load+0xbf/0xf0 [ 77.984923][ T6376] ? security_bpf_prog_load+0x2c/0xa0 [ 77.984946][ T6376] bpf_prog_load+0xedd/0x1070 [ 77.985024][ T6376] ? security_bpf+0x2b/0x90 [ 77.985041][ T6376] __sys_bpf+0x51d/0x790 [ 77.985118][ T6376] __x64_sys_bpf+0x41/0x50 [ 77.985144][ T6376] x64_sys_call+0x2478/0x2fb0 [ 77.985162][ T6376] do_syscall_64+0xd2/0x200 [ 77.985179][ T6376] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.985229][ T6376] ? clear_bhb_loop+0x40/0x90 [ 77.985249][ T6376] ? clear_bhb_loop+0x40/0x90 [ 77.985292][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.985310][ T6376] RIP: 0033:0x7fc99b30e929 [ 77.985323][ T6376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.985338][ T6376] RSP: 002b:00007fc999977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.985356][ T6376] RAX: ffffffffffffffda RBX: 00007fc99b535fa0 RCX: 00007fc99b30e929 [ 77.985369][ T6376] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 77.985450][ T6376] RBP: 00007fc999977090 R08: 0000000000000000 R09: 0000000000000000 [ 77.985460][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.985470][ T6376] R13: 0000000000000000 R14: 00007fc99b535fa0 R15: 00007ffc1016ad38 [ 77.985486][ T6376] [ 78.463992][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.495852][ T6382] tipc: Enabled bearer , priority 0 [ 78.583557][ T6386] netlink: 'syz.4.744': attribute type 27 has an invalid length. [ 78.774933][ T6400] loop3: detected capacity change from 0 to 512 [ 78.948257][ T6402] netlink: 'syz.4.750': attribute type 27 has an invalid length. [ 78.981654][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.025591][ T6400] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.210082][ T6400] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.749: iget: bad i_size value: 2533274857506816 [ 79.303294][ T6381] tipc: Disabling bearer [ 79.311627][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.342974][ T6412] loop4: detected capacity change from 0 to 512 [ 79.432639][ T6412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.449776][ T6416] loop5: detected capacity change from 0 to 512 [ 79.495295][ T6416] EXT4-fs (loop5): 1 orphan inode deleted [ 79.503447][ T6412] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.519167][ T3931] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 79.538477][ T6416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.556152][ T6416] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.568762][ T6416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.666777][ T6439] netlink: 'syz.3.762': attribute type 4 has an invalid length. [ 79.707156][ T6442] loop5: detected capacity change from 0 to 512 [ 79.742281][ T6437] tipc: Enabling of bearer rejected, already enabled [ 79.783337][ T6442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.802746][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 79.802759][ T29] audit: type=1400 audit(2000000040.910:1918): avc: denied { create } for pid=6433 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.825348][ T6442] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.839388][ T29] audit: type=1400 audit(2000000040.940:1919): avc: denied { bind } for pid=6433 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.858881][ T29] audit: type=1400 audit(2000000040.960:1920): avc: denied { sys_module } for pid=6438 comm="syz.3.762" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.924604][ T29] audit: type=1326 audit(2000000041.010:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7594cae929 code=0x7ffc0000 [ 79.948247][ T29] audit: type=1326 audit(2000000041.010:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7594cae929 code=0x7ffc0000 [ 79.971626][ T29] audit: type=1326 audit(2000000041.010:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7594cae929 code=0x7ffc0000 [ 79.995327][ T29] audit: type=1326 audit(2000000041.010:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7594cae929 code=0x7ffc0000 [ 80.019334][ T29] audit: type=1326 audit(2000000041.010:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7594cae929 code=0x7ffc0000 [ 80.043385][ T29] audit: type=1326 audit(2000000041.010:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7594cae929 code=0x7ffc0000 [ 80.067550][ T29] audit: type=1326 audit(2000000041.010:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7594cae929 code=0x7ffc0000 [ 80.124602][ T6463] FAULT_INJECTION: forcing a failure. [ 80.124602][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 80.137279][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.2.767 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 80.137318][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.137325][ T6463] Call Trace: [ 80.137328][ T6463] [ 80.137333][ T6463] __dump_stack+0x1d/0x30 [ 80.137346][ T6463] dump_stack_lvl+0xe8/0x140 [ 80.137359][ T6463] dump_stack+0x15/0x1b [ 80.137369][ T6463] should_fail_ex+0x265/0x280 [ 80.137386][ T6463] should_failslab+0x8c/0xb0 [ 80.137516][ T6463] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 80.137533][ T6463] ? sidtab_sid2str_get+0xa0/0x130 [ 80.137546][ T6463] ? skb_put+0xa9/0xf0 [ 80.137584][ T6463] kmemdup_noprof+0x2b/0x70 [ 80.137624][ T6463] sidtab_sid2str_get+0xa0/0x130 [ 80.137637][ T6463] security_sid_to_context_core+0x1eb/0x2e0 [ 80.137678][ T6463] security_sid_to_context+0x27/0x40 [ 80.137699][ T6463] avc_audit_post_callback+0x9d/0x520 [ 80.137722][ T6463] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 80.137745][ T6463] common_lsm_audit+0x1b8/0x230 [ 80.137811][ T6463] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 80.137827][ T6463] slow_avc_audit+0x104/0x140 [ 80.137842][ T6463] avc_has_perm+0x128/0x150 [ 80.137908][ T6463] sel_write_load+0xf8/0x380 [ 80.137923][ T6463] ? __pfx_sel_write_load+0x10/0x10 [ 80.137953][ T6463] vfs_write+0x269/0x8e0 [ 80.138000][ T6463] ? __rcu_read_unlock+0x4f/0x70 [ 80.138012][ T6463] ? __fget_files+0x184/0x1c0 [ 80.138025][ T6463] ksys_write+0xda/0x1a0 [ 80.138128][ T6463] __x64_sys_write+0x40/0x50 [ 80.138145][ T6463] x64_sys_call+0x2cdd/0x2fb0 [ 80.138157][ T6463] do_syscall_64+0xd2/0x200 [ 80.138239][ T6463] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.138370][ T6463] ? clear_bhb_loop+0x40/0x90 [ 80.138513][ T6463] ? clear_bhb_loop+0x40/0x90 [ 80.138525][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.138553][ T6463] RIP: 0033:0x7fdaa859e929 [ 80.138569][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.138586][ T6463] RSP: 002b:00007fdaa6c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.138601][ T6463] RAX: ffffffffffffffda RBX: 00007fdaa87c5fa0 RCX: 00007fdaa859e929 [ 80.138608][ T6463] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000003 [ 80.138615][ T6463] RBP: 00007fdaa6c07090 R08: 0000000000000000 R09: 0000000000000000 [ 80.138652][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.138659][ T6463] R13: 0000000000000000 R14: 00007fdaa87c5fa0 R15: 00007ffd326421b8 [ 80.138670][ T6463] [ 80.409708][ T6463] SELinux: ebitmap: truncated map [ 80.416171][ T6463] SELinux: failed to load policy [ 80.430266][ T6465] netlink: 'syz.3.768': attribute type 27 has an invalid length. [ 80.550735][ T6484] netlink: 'syz.3.775': attribute type 4 has an invalid length. [ 80.594596][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.711370][ T6502] netlink: 'syz.5.780': attribute type 27 has an invalid length. [ 80.727773][ T6504] netlink: 'syz.3.782': attribute type 27 has an invalid length. [ 80.744407][ T6501] bond1: entered promiscuous mode [ 80.749671][ T6501] bond1: entered allmulticast mode [ 80.755066][ T6501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.764256][ T6501] bond1 (unregistering): Released all slaves [ 80.958438][ T6526] loop3: detected capacity change from 0 to 2048 [ 80.973704][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.984268][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.183765][ T6544] loop4: detected capacity change from 0 to 2048 [ 81.200581][ T6544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.553746][ T6550] bond1: entered promiscuous mode [ 81.558928][ T6550] bond1: entered allmulticast mode [ 81.564620][ T6550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.574018][ T6550] bond1 (unregistering): Released all slaves [ 81.674868][ T6554] serio: Serial port ptm0 [ 81.730732][ T6557] random: crng reseeded on system resumption [ 81.739274][ T6558] validate_nla: 2 callbacks suppressed [ 81.739347][ T6558] netlink: 'syz.5.799': attribute type 27 has an invalid length. [ 81.846067][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.935071][ T6568] loop5: detected capacity change from 0 to 512 [ 81.975089][ T6568] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.084675][ T6568] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 82.100250][ T6568] EXT4-fs (loop5): 1 truncate cleaned up [ 82.106250][ T6568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.164961][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.177132][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.237187][ T6584] loop5: detected capacity change from 0 to 1024 [ 82.319989][ T6584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.334122][ T6584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.413315][ T6593] netlink: 'syz.5.812': attribute type 27 has an invalid length. [ 82.726021][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.734579][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.846996][ T6600] FAULT_INJECTION: forcing a failure. [ 82.846996][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 82.859676][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.2.815 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 82.859703][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.859714][ T6600] Call Trace: [ 82.859781][ T6600] [ 82.859789][ T6600] __dump_stack+0x1d/0x30 [ 82.859807][ T6600] dump_stack_lvl+0xe8/0x140 [ 82.859823][ T6600] dump_stack+0x15/0x1b [ 82.859841][ T6600] should_fail_ex+0x265/0x280 [ 82.859888][ T6600] should_failslab+0x8c/0xb0 [ 82.859907][ T6600] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 82.860009][ T6600] ? xfrm_add_sa+0x18c5/0x2410 [ 82.860117][ T6600] kmemdup_noprof+0x2b/0x70 [ 82.860137][ T6600] xfrm_add_sa+0x18c5/0x2410 [ 82.860159][ T6600] xfrm_user_rcv_msg+0x563/0x660 [ 82.860194][ T6600] ? xas_load+0x2d6/0x430 [ 82.860232][ T6600] netlink_rcv_skb+0x123/0x220 [ 82.860262][ T6600] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 82.860293][ T6600] xfrm_netlink_rcv+0x48/0x60 [ 82.860334][ T6600] netlink_unicast+0x5a1/0x670 [ 82.860364][ T6600] netlink_sendmsg+0x58b/0x6b0 [ 82.860389][ T6600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.860412][ T6600] __sock_sendmsg+0x145/0x180 [ 82.860467][ T6600] ____sys_sendmsg+0x31e/0x4e0 [ 82.860537][ T6600] ___sys_sendmsg+0x17b/0x1d0 [ 82.860655][ T6600] __x64_sys_sendmsg+0xd4/0x160 [ 82.860764][ T6600] x64_sys_call+0x2999/0x2fb0 [ 82.860785][ T6600] do_syscall_64+0xd2/0x200 [ 82.860796][ T6600] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.860888][ T6600] ? clear_bhb_loop+0x40/0x90 [ 82.860900][ T6600] ? clear_bhb_loop+0x40/0x90 [ 82.860912][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.860925][ T6600] RIP: 0033:0x7fdaa859e929 [ 82.860935][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.860946][ T6600] RSP: 002b:00007fdaa6c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.860959][ T6600] RAX: ffffffffffffffda RBX: 00007fdaa87c5fa0 RCX: 00007fdaa859e929 [ 82.860965][ T6600] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 82.860995][ T6600] RBP: 00007fdaa6c07090 R08: 0000000000000000 R09: 0000000000000000 [ 82.861002][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.861009][ T6600] R13: 0000000000000000 R14: 00007fdaa87c5fa0 R15: 00007ffd326421b8 [ 82.861019][ T6600] [ 83.193832][ T6611] hub 9-0:1.0: USB hub found [ 83.198622][ T6611] hub 9-0:1.0: 8 ports detected [ 83.211844][ T6611] netlink: 'syz.3.818': attribute type 21 has an invalid length. [ 83.285440][ T6620] loop3: detected capacity change from 0 to 1024 [ 83.302225][ T6620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.335025][ T6620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.017211][ T6622] Set syz1 is full, maxelem 65536 reached [ 84.268363][ T6666] serio: Serial port ptm0 [ 84.275401][ T6668] netlink: 'syz.5.840': attribute type 27 has an invalid length. [ 84.277247][ T6671] netlink: 'syz.0.842': attribute type 4 has an invalid length. [ 84.338066][ T6675] random: crng reseeded on system resumption [ 84.368305][ T6681] netlink: 'syz.5.844': attribute type 27 has an invalid length. [ 84.491874][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.845'. [ 84.503771][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 84.532280][ T6690] loop5: detected capacity change from 0 to 256 [ 84.556721][ T6690] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.605603][ T6699] FAULT_INJECTION: forcing a failure. [ 84.605603][ T6699] name failslab, interval 1, probability 0, space 0, times 0 [ 84.618449][ T6699] CPU: 0 UID: 0 PID: 6699 Comm: syz.3.852 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 84.618477][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.618560][ T6699] Call Trace: [ 84.618568][ T6699] [ 84.618576][ T6699] __dump_stack+0x1d/0x30 [ 84.618598][ T6699] dump_stack_lvl+0xe8/0x140 [ 84.618618][ T6699] dump_stack+0x15/0x1b [ 84.618635][ T6699] should_fail_ex+0x265/0x280 [ 84.618669][ T6699] should_failslab+0x8c/0xb0 [ 84.618693][ T6699] __kmalloc_noprof+0xa5/0x3e0 [ 84.618769][ T6699] ? sk_prot_alloc+0xa8/0x190 [ 84.618814][ T6699] ? should_fail_ex+0xdb/0x280 [ 84.618890][ T6699] sk_prot_alloc+0xa8/0x190 [ 84.618920][ T6699] sk_alloc+0x34/0x360 [ 84.618948][ T6699] bpf_prog_test_run_skb+0x234/0xbd0 [ 84.619044][ T6699] ? __rcu_read_unlock+0x4f/0x70 [ 84.619065][ T6699] ? __fget_files+0x184/0x1c0 [ 84.619080][ T6699] ? __rcu_read_unlock+0x4f/0x70 [ 84.619142][ T6699] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 84.619171][ T6699] bpf_prog_test_run+0x227/0x390 [ 84.619192][ T6699] __sys_bpf+0x3dc/0x790 [ 84.619232][ T6699] __x64_sys_bpf+0x41/0x50 [ 84.619280][ T6699] x64_sys_call+0x2478/0x2fb0 [ 84.619326][ T6699] do_syscall_64+0xd2/0x200 [ 84.619344][ T6699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.619366][ T6699] ? clear_bhb_loop+0x40/0x90 [ 84.619384][ T6699] ? clear_bhb_loop+0x40/0x90 [ 84.619454][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.619473][ T6699] RIP: 0033:0x7f7594cae929 [ 84.619488][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.619504][ T6699] RSP: 002b:00007f7593317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.619523][ T6699] RAX: ffffffffffffffda RBX: 00007f7594ed5fa0 RCX: 00007f7594cae929 [ 84.619535][ T6699] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 84.619580][ T6699] RBP: 00007f7593317090 R08: 0000000000000000 R09: 0000000000000000 [ 84.619592][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.619605][ T6699] R13: 0000000000000000 R14: 00007f7594ed5fa0 R15: 00007ffd97ca99c8 [ 84.619624][ T6699] [ 84.848149][ T6705] loop4: detected capacity change from 0 to 512 [ 84.848383][ T6690] FAT-fs (loop5): Directory bread(block 64) failed [ 84.862197][ T6690] FAT-fs (loop5): Directory bread(block 65) failed [ 84.873672][ T6704] futex_wake_op: syz.2.855 tries to shift op by 32; fix this program [ 84.882566][ T6690] FAT-fs (loop5): Directory bread(block 66) failed [ 84.891686][ T6705] EXT4-fs (loop4): 1 orphan inode deleted [ 84.891946][ T6690] FAT-fs (loop5): Directory bread(block 67) failed [ 84.898620][ T6705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.915875][ T6710] netlink: 'syz.3.856': attribute type 4 has an invalid length. [ 84.918387][ T6705] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.925088][ T51] __quota_error: 102 callbacks suppressed [ 84.925103][ T51] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.936852][ T6690] FAT-fs (loop5): Directory bread(block 68) failed [ 84.941530][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 84.953470][ T6690] FAT-fs (loop5): Directory bread(block 69) failed [ 84.964232][ T6705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.977577][ T6690] FAT-fs (loop5): Directory bread(block 70) failed [ 85.006509][ T6690] FAT-fs (loop5): Directory bread(block 71) failed [ 85.014586][ T6690] FAT-fs (loop5): Directory bread(block 72) failed [ 85.022078][ T6690] FAT-fs (loop5): Directory bread(block 73) failed [ 85.051542][ T29] audit: type=1400 audit(2000000046.160:2030): avc: denied { mount } for pid=6689 comm="syz.5.848" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 85.107363][ T6717] loop3: detected capacity change from 0 to 2048 [ 85.107383][ T6720] netlink: 'syz.4.859': attribute type 27 has an invalid length. [ 85.143041][ T6717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.257984][ T29] audit: type=1400 audit(2000000046.360:2031): avc: denied { unmount } for pid=4039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 85.352915][ T6731] loop4: detected capacity change from 0 to 1024 [ 85.476661][ T6737] loop5: detected capacity change from 0 to 256 [ 85.485157][ T6737] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.499576][ T6731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.519367][ T6731] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.519433][ T6737] FAT-fs (loop5): Directory bread(block 64) failed [ 85.559116][ T6737] FAT-fs (loop5): Directory bread(block 65) failed [ 85.565756][ T6737] FAT-fs (loop5): Directory bread(block 66) failed [ 85.579117][ T6737] FAT-fs (loop5): Directory bread(block 67) failed [ 85.585710][ T6737] FAT-fs (loop5): Directory bread(block 68) failed [ 85.609105][ T6737] FAT-fs (loop5): Directory bread(block 69) failed [ 85.639578][ T6737] FAT-fs (loop5): Directory bread(block 70) failed [ 85.646878][ T6737] FAT-fs (loop5): Directory bread(block 71) failed [ 85.659771][ T6737] FAT-fs (loop5): Directory bread(block 72) failed [ 85.666511][ T6737] FAT-fs (loop5): Directory bread(block 73) failed [ 85.819646][ T6746] loop5: detected capacity change from 0 to 512 [ 85.823524][ T29] audit: type=1400 audit(2000000046.930:2032): avc: denied { read } for pid=6747 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.882240][ T6746] EXT4-fs (loop5): 1 orphan inode deleted [ 85.895837][ T6746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.920698][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.930902][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 85.947943][ T6746] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.974064][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.994070][ T6746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.020626][ T6757] loop3: detected capacity change from 0 to 2048 [ 86.063269][ T6757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.197413][ T29] audit: type=1326 audit(2000000047.300:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa859e929 code=0x7ffc0000 [ 86.220994][ T29] audit: type=1326 audit(2000000047.300:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa859e929 code=0x7ffc0000 [ 86.248378][ T6765] loop5: detected capacity change from 0 to 2048 [ 86.281107][ T29] audit: type=1326 audit(2000000047.370:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa859e929 code=0x7ffc0000 [ 86.304726][ T29] audit: type=1326 audit(2000000047.370:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa859e929 code=0x7ffc0000 [ 86.319915][ T6765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.328226][ T29] audit: type=1326 audit(2000000047.370:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa859e929 code=0x7ffc0000 [ 86.397806][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.515595][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.651083][ T6787] tipc: Enabling of bearer rejected, already enabled [ 86.701318][ T6790] serio: Serial port ptm0 [ 86.753749][ T6792] random: crng reseeded on system resumption [ 87.194822][ T6811] netlink: 'syz.4.893': attribute type 27 has an invalid length. [ 87.373427][ T6816] netlink: 'syz.4.895': attribute type 21 has an invalid length. [ 87.373443][ T6816] netlink: 168 bytes leftover after parsing attributes in process `syz.4.895'. [ 87.568239][ T6832] tipc: Enabling of bearer rejected, already enabled [ 87.662870][ T6836] loop3: detected capacity change from 0 to 512 [ 87.693418][ T6836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.717354][ T6840] loop5: detected capacity change from 0 to 512 [ 87.740231][ T6836] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.740397][ T6840] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.764158][ T6840] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.779017][ T6840] EXT4-fs (loop5): 1 truncate cleaned up [ 87.798175][ T6840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.921764][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.015789][ T6849] netlink: 'syz.5.905': attribute type 27 has an invalid length. [ 88.154485][ T6859] netlink: 'syz.4.908': attribute type 4 has an invalid length. [ 88.274573][ T6868] loop5: detected capacity change from 0 to 1024 [ 88.321027][ T6868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.388208][ T6877] netlink: 'syz.2.914': attribute type 4 has an invalid length. [ 88.457269][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.527710][ T6886] futex_wake_op: syz.2.918 tries to shift op by 32; fix this program [ 88.792557][ T6898] netlink: 'syz.4.920': attribute type 27 has an invalid length. [ 89.033580][ T6914] futex_wake_op: syz.2.929 tries to shift op by 32; fix this program [ 89.198347][ T6924] loop4: detected capacity change from 0 to 2048 [ 89.232431][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.410382][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.638367][ T6940] loop3: detected capacity change from 0 to 1024 [ 89.649629][ T6940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.670697][ T6940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.049507][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 90.049522][ T29] audit: type=1400 audit(2000000051.160:2134): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.089291][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.113362][ T6965] netlink: 'syz.5.951': attribute type 27 has an invalid length. [ 90.128478][ T6967] loop3: detected capacity change from 0 to 512 [ 90.147227][ T29] audit: type=1400 audit(2000000051.250:2135): avc: denied { remount } for pid=6968 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.193012][ T6967] EXT4-fs (loop3): 1 orphan inode deleted [ 90.199934][ T6967] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.204994][ T6974] bond1: entered promiscuous mode [ 90.215544][ T6974] bond1: entered allmulticast mode [ 90.235220][ T6974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.244234][ T29] audit: type=1400 audit(2000000051.350:2136): avc: denied { relabelto } for pid=6973 comm="syz.0.954" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 90.271781][ T29] audit: type=1400 audit(2000000051.350:2137): avc: denied { associate } for pid=6973 comm="syz.0.954" name="cgroup.procs" dev="cgroup" ino=102 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ldconfig_cache_t:s0" [ 90.305512][ T6974] bond1 (unregistering): Released all slaves [ 90.311732][ T3931] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.311801][ T3931] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 90.505918][ T29] audit: type=1400 audit(2000000051.610:2138): avc: denied { create } for pid=7004 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.560683][ T7007] futex_wake_op: syz.3.966 tries to shift op by 32; fix this program [ 90.591519][ T29] audit: type=1400 audit(2000000051.700:2139): avc: denied { read } for pid=7005 comm="syz.3.966" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.591547][ T29] audit: type=1400 audit(2000000051.700:2140): avc: denied { open } for pid=7005 comm="syz.3.966" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.591569][ T29] audit: type=1400 audit(2000000051.700:2141): avc: denied { ioctl } for pid=7005 comm="syz.3.966" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.635059][ T7011] loop5: detected capacity change from 0 to 2048 [ 90.671135][ T29] audit: type=1400 audit(2000000051.780:2142): avc: denied { create } for pid=7010 comm="syz.5.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.692351][ T3297] ================================================================== [ 90.692374][ T3297] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 90.692397][ T3297] [ 90.692403][ T3297] write to 0xffff888107266190 of 8 bytes by task 2995 on cpu 0: [ 90.692418][ T3297] __dentry_kill+0x142/0x4b0 [ 90.692437][ T3297] dput+0x5e/0xd0 [ 90.692454][ T3297] step_into+0x5b2/0x820 [ 90.692472][ T3297] walk_component+0x162/0x220 [ 90.692493][ T3297] path_lookupat+0xfe/0x2a0 [ 90.692515][ T3297] filename_lookup+0x2d7/0x340 [ 90.692538][ T3297] do_readlinkat+0x7d/0x320 [ 90.692562][ T3297] __x64_sys_readlink+0x47/0x60 [ 90.692585][ T3297] x64_sys_call+0x2cf3/0x2fb0 [ 90.692606][ T3297] do_syscall_64+0xd2/0x200 [ 90.692624][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.692644][ T3297] [ 90.692650][ T3297] read to 0xffff888107266190 of 8 bytes by task 3297 on cpu 1: [ 90.692666][ T3297] fast_dput+0x5f/0x2c0 [ 90.692684][ T3297] dput+0x24/0xd0 [ 90.692700][ T3297] do_unlinkat+0x299/0x4c0 [ 90.692728][ T3297] __x64_sys_unlink+0x2e/0x40 [ 90.692758][ T3297] x64_sys_call+0x22a6/0x2fb0 [ 90.692780][ T3297] do_syscall_64+0xd2/0x200 [ 90.692797][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.692816][ T3297] [ 90.692819][ T3297] value changed: 0xffff8882379e9540 -> 0x0000000000000000 [ 90.692831][ T3297] [ 90.692835][ T3297] Reported by Kernel Concurrency Sanitizer on: [ 90.692846][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: udevd Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 90.692872][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.692885][ T3297] ================================================================== [ 90.851416][ T7026] loop4: detected capacity change from 0 to 2048